add token permissions to csharp-testsuite

Signed-off-by: John Detter <4099508+jdetter@users.noreply.github.com>

Author: jdetter

.github/workflows/ci.yml

@@ -652,6 +652,8 @@ jobs:
         if: ${{ github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork }}
 
   csharp-testsuite:
+    permissions:
+      contents: read
     runs-on: spacetimedb-new-runner
     container:
       image: localhost:5000/spacetimedb-ci:latest