Add permissions block to CI workflow for security best practice

Agent-Logs-Url: https://github.com/githubnext/tsessebe/sessions/235062ee-1f53-4d20-8112-077b29b714be

Co-authored-by: mrjf <180956+mrjf@users.noreply.github.com>

Author: Copilot

.github/workflows/ci.yml

@@ -9,6 +9,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test & Lint