ci: chmod go-w ~/.cache before pkg commands (sr.ht cache is group-writable)

ober

1cba77167c933ba34068d5a89cb33e29850572fc

diff --git a/.builds/ci.yml b/.builds/ci.yml
index 021b8bb..b08e84b 100644
--- a/.builds/ci.yml
+++ b/.builds/ci.yml
@@ -31,6 +31,7 @@ tasks:
 - package: |
     cd jerboa-semgrep
     J="$HOME/jerboa/dist/jerboa"
+    chmod -R go-w "$HOME/.cache"
     "$J" pkg verify
     "$J" pkg policy
     "$J" pkg build