fix: Add permissions block to workflow, use replaceAll for wildcards

Author: mattcarrollcode

.github/workflows/pre-merge.yml

@@ -5,6 +5,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     runs-on: ubuntu-latest

scripts/src/sync-vercel-redirects.ts

@@ -29,7 +29,7 @@ function expandPartialWildcard(
 ): VercelRedirect[] {
   const segments = source.split('/');
   const wildcardSeg = segments.find(seg => seg.includes('*') && seg !== '*')!;
-  const prefix = wildcardSeg.replace('*', '');
+  const prefix = wildcardSeg.replaceAll('*', '');
 
   // Infer docs directory from destination path
   // e.g. /docs/next/legacy/native-modules-:splat → docs/legacy/