chore: hypatia auto-fix (1 formulaic fixes)

Applied by auto-fix-formulaic.sh:
- SHA-pinned unpinned GitHub Actions
- Added missing workflow permissions
- Fixed license headers

Co-Authored-By: hypatia-autofix <noreply@hyperpolymath.github.io>

Author: hyperpolymath

.github/workflows/generator-generic-ossf-slsa3-publish.yml

@@ -11,6 +11,8 @@
 # The provenance file can be verified using https://github.com/slsa-framework/slsa-verifier.
 # For more information about SLSA and how it improves the supply-chain, visit slsa.dev.
 
+permissions: read-all
+
 name: SLSA generic generator
 on:
   workflow_dispatch: