Add explicit permissions to GitHub Actions workflows

[CodyCBakerPhD]

Summary

This PR adds explicit permission declarations to all GitHub Actions workflows to follow the principle of least privilege and improve security posture.

Key Changes

• Added permissions block to 7 workflows with minimal required permissions:
  • build_and_upload_docker_image_dev.yml: contents: read and packages: write (for pushing to GHCR)
  • build_and_upload_docker_image_latest.yml: contents: read and packages: write (for pushing to GHCR)
  • daily_remote_tests.yml: contents: read
  • daily_tests.yml: contents: read
  • deploy_tests_on_pull_request.yml: contents: read
  • publish_to_pypi_on_github_release.yml: contents: read
  • remote_testing.yml: contents: read

Implementation Details

• Each workflow now explicitly declares only the permissions it requires
• Docker image workflows require packages: write to push images to GitHub Container Registry (GHCR)
• All workflows require contents: read to access repository contents
• This prevents workflows from having unnecessary access to other resources by default
• Follows GitHub's security best practices for workflow permissions

https://claude.ai/code/session_017m4JYyCuytuMjwKakTqyT3

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.75%. Comparing base (a7a9f46) to head (00fc89f).
⚠️ Report is 10 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #282      +/-   ##
==========================================
+ Coverage   73.96%   74.75%   +0.78%     
==========================================
  Files          40       40              
  Lines        1571     1620      +49     
==========================================
+ Hits         1162     1211      +49     
  Misses        409      409              

Flag	Coverage Δ
unittests	74.75% <ø> (+0.78%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.