chore: Use Typst community action

[briferz]

This pull request updates the GitHub Actions workflows for building, releasing, and validating CVs. The main improvements include updating permissions for better security and compatibility, switching to a maintained Typst setup action, and ensuring output directories are created in both workflows.

Workflow configuration and security improvements:

• Added explicit permissions blocks to the build-and-release and compile-cv jobs to restrict and clarify GitHub token access. [1] [2]

Action maintenance and compatibility:

• Updated the Typst setup action from yusancky/setup-typst@v2 to the community-maintained typst-community/setup-typst@v4 for both workflows. [1] [2]

Build process reliability:

• Added a step to create the output directory in the compile-cv job to prevent errors during PDF generation.
• Ensured the output directory creation step is present in the build-and-release job.

[gemini-code-assist]

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

[github-actions]

✅ CV compilation successful! Both PDF versions compiled without errors. You can download the artifacts from the workflow run.