ci: add explicit workflow permissions (#405)

Author: linuxdaemon

.github/workflows/pre-commit-update.yml

@@ -10,6 +10,9 @@ env:
 
 jobs:
   update-pre-commit-config:
+    permissions:
+      contents: write
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository

.github/workflows/python-publish.yml

@@ -12,6 +12,8 @@ env:
 
 jobs:
   build:
+    permissions:
+      contents: read
     name: Build distribution 📦
     runs-on: ubuntu-latest
     steps: