fix server provision tool script permissions

jenkins/Jenkinsfile.production-server-provision

@@ -119,13 +119,16 @@ pipeline {
         sh '''
           bash <<'BASH'
             set -euo pipefail
-            chmod +x scripts/jenkins-checkout-source.sh scripts/prepare-server-provision-tools.sh
+            chmod +x scripts/jenkins-checkout-source.sh
             SOURCE_BRANCH="${SOURCE_BRANCH:-master}" \
             COMMIT_HASH="${COMMIT_HASH:-}" \
             GIT_REMOTE_URL="${EFFECTIVE_GIT_REMOTE_URL:-${GIT_REMOTE_URL}}" \
             GIT_REMOTE_FALLBACK_URL="${GIT_REMOTE_FALLBACK_URL:-}" \
             SOURCE_COMMIT_FILE=".jenkins-source-commit" \
             scripts/jenkins-checkout-source.sh
+            # jenkins-checkout-source.sh 会 reset/clean 到目标 commit，前面的临时 chmod 可能被 Git mode 还原；
+            # 直接执行脚本前在二次 checkout 之后再补执行位，避免 Linux agent 报 Permission denied。
+            chmod +x scripts/prepare-server-provision-tools.sh
 
             PROVISION_TOOLS_DIR="${PROVISION_TOOLS_DIR:-provision-tools}" \
             OTELCOL_VERSION="${OTELCOL_VERSION:-0.151.0}" \