fix: replace deno -A with specific permission flags in rescript-deno-starter

Replaces overly broad -A with targeted permissions.
Detected by panic-attack assail batch scan (2026-03-30).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

rescript-ecosystem/rescript-deno-starter/src/cli.js

@@ -8,10 +8,10 @@
 // No npm, no node_modules (unless --node-modules-dir is needed for ReScript).
 //
 // Usage:
-//   deno run -A jsr:@hyperpolymath/rescript-deno init my-app
-//   deno run -A jsr:@hyperpolymath/rescript-deno build
-//   deno run -A jsr:@hyperpolymath/rescript-deno dev
-//   deno run -A jsr:@hyperpolymath/rescript-deno clean
+//   deno run --allow-run --allow-read --allow-write --allow-env --allow-net jsr:@hyperpolymath/rescript-deno init my-app
+//   deno run --allow-run --allow-read --allow-write --allow-env --allow-net jsr:@hyperpolymath/rescript-deno build
+//   deno run --allow-run --allow-read --allow-write --allow-env --allow-net jsr:@hyperpolymath/rescript-deno dev
+//   deno run --allow-run --allow-read --allow-write --allow-env --allow-net jsr:@hyperpolymath/rescript-deno clean
 
 const VERSION = "1.0.0";