ci(scorecard): add job-level permissions for reusable workflow #578

Job	Run time
governance / Guix primary / Nix fallback policy	5s
governance / Well-Known (RFC 9116 + RSR)	4s
governance / Workflow security linter	6s
governance / Code quality + docs	15s
governance / Language / package anti-pattern policy	7s
governance / Licence consistency	8s
governance / Security policy checks	18s
governance / Trusted-base reduction policy	8s
governance / Validate Hypatia baseline	3s
	1m 14s

Provide feedback