fix(workflows): runner input & PR permission

Author: ReenigneArcher

.github/workflows/__call-codeql.yml

@@ -14,7 +14,7 @@ on:
       runner:
         required: false
         type: string
-        default: "[ubuntu-latest]"
+        default: '["ubuntu-latest"]'
 
 jobs:
   languages:

.github/workflows/__call-common-lint.yml

@@ -19,7 +19,7 @@ on:
       runner:
         required: false
         type: string
-        default: "[ubuntu-latest]"
+        default: '["ubuntu-latest"]'
 
 jobs:
   lint:

.github/workflows/_common-lint.yml

@@ -20,3 +20,4 @@ jobs:
     if: ${{ github.repository != 'LizardByte/.github' }}
     permissions:
       contents: read
+      pull-requests: read