fix: Add actions: read permission to zizmor workflow

codeql-action/upload-sarif needs actions: read to fetch workflow run
metadata for telemetry. Without it the SARIF upload step fails with
"Resource not accessible by integration".

Author: ocean

.github/workflows/zizmor.yml

@@ -14,6 +14,7 @@ jobs:
     permissions:
       security-events: write
       contents: read
+      actions: read
     steps:
       - name: Checkout repository
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4