fix(workflows): runner input & PR permission

Author: ReenigneArcher

.github/workflows/__call-codeql.yml

@@ -24,7 +24,7 @@ jobs:
     outputs:
       matrix: ${{ steps.lang.outputs.result }}
       continue: ${{ steps.continue.outputs.result }}
-    runs-on: ${{ (inputs && inputs.runner && fromJson(inputs.runner)) || 'ubuntu-latest' }}
+    runs-on: ${{ fromJson(inputs.runner || '["ubuntu-latest"]') }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2

.github/workflows/__call-common-lint.yml

@@ -27,7 +27,7 @@ jobs:
     permissions:
       contents: read
       pull-requests: read
-    runs-on: ${{ (inputs && inputs.runner && fromJson(inputs.runner)) || 'ubuntu-latest' }}
+    runs-on: ${{ fromJson(inputs.runner || '["ubuntu-latest"]') }}
     env:
       CLANG_FORMAT_VERSION: 20
     steps:

.github/workflows/_common-lint.yml

@@ -20,3 +20,4 @@ jobs:
     if: ${{ github.repository != 'LizardByte/.github' }}
     permissions:
       contents: read
+      pull-requests: read