chore: hypatia auto-fix (1 formulaic fixes)

Applied by auto-fix-formulaic.sh:
- SHA-pinned unpinned GitHub Actions
- Added missing workflow permissions
- Fixed license headers

Co-Authored-By: hypatia-autofix <noreply@hyperpolymath.github.io>

Author: hyperpolymath

.github/workflows/language-policy.yml

@@ -1,4 +1,6 @@
 # SPDX-License-Identifier: PMPL-1.0-or-later
+permissions: read-all
+
 name: Language Policy Enforcement
 on: [push, pull_request]
 jobs: