ci(scorecard): add job-level permissions for reusable workflow (#34) #36

Job	Run time
governance / Code quality + docs	13s
governance / Guix primary / Nix fallback policy	4s
governance / Validate Hypatia baseline	5s
governance / Security policy checks	5s
governance / Well-Known (RFC 9116 + RSR)	4s
governance / Language / package anti-pattern policy	12s
governance / Licence consistency	7s
governance / Workflow security linter	4s
governance / Trusted-base reduction policy	5s
	59s

Provide feedback