ci: fix permissions for build artifacts

- anyone should be able to read and traverse the tree
- not all the files should be executable, only scripts