fix: scope CD notify-downstream app token to n24q02m profile repo

The notify-downstream job dispatches a core-update repository_dispatch
event to n24q02m/n24q02m so the profile repo can fan out tracking
issues through its notify-downstream.yml workflow. Without an explicit
owner + repositories scope on the app token, GitHub scopes the token
to the current repo only, causing a 403 Resource not accessible by
integration when hitting repos/n24q02m/n24q02m/dispatches. Add the
scope so the dispatch lands.

Observed on run 24713879408 after cutting v1.9.0.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: n24q02m

.github/workflows/cd.yml

@@ -105,6 +105,8 @@ jobs:
         with:
           app-id: ${{ vars.CI_APP_ID }}
           private-key: ${{ secrets.CI_APP_KEY }}
+          owner: n24q02m
+          repositories: n24q02m
 
       - name: Dispatch core-update
         env: