[workshop-diagrams] Add theme-aware explanatory diagram for permission error resolution flow

Summary

Which workshop file changed

workshop/side-quest-01-03-permission-errors.md — the optional side quest that helps learners resolve permission denied errors.

What changed

This PR creates a new explanatory diagram (not a migration). The file had no images before.

SVG files added

workshop/images/side-quest-01-03-permission-fix-light.svg
workshop/images/side-quest-01-03-permission-fix-dark.svg

Both are 1200x560 self-contained SVGs following the workshop light/dark palette. A <picture> block using the canonical theme-aware format was inserted near the How to fix it section, with the light variant as the fallback src.

Why the diagram helps learners

The permission-error side quest is pure prose. Learners new to terminals often struggle to understand when to reach for sudo versus a Windows admin prompt. A decision-flow diagram makes the two-branch fix path immediately scannable: see error → identify OS → apply the right fix.

QA

Both SVGs validated as well-formed XML
Light variant rendered at 780x364 in Playwright (Chrome CDP) with complete: true
Both variants are nonblank (~30 KB screenshots)
Markdown linter: 0 issues

Warning

Firewall blocked 12 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
awmgmcpg
clients2.google.com
clientservices.googleapis.com
host.docker.internal
optimizationguidepa.googleapis.com
redirector.gvt1.com
safebrowsingohttpgateway.googleapis.com
storage.googleapis.com
update.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "awmgmcpg"
    - "clients2.google.com"
    - "clientservices.googleapis.com"
    - "host.docker.internal"
    - "optimizationguidepa.googleapis.com"
    - "redirector.gvt1.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "storage.googleapis.com"
    - "update.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

Generated by 🧠 Workshop Explanatory Diagram Generator · 98.7 AIC · ⌖ 7.47 AIC · ⊞ 6.4K · ◷

expires on Jul 26, 2026, 8:45 AM UTC