ci: update permissions & env vars

Author: json-derulo

.github/workflows/pr.yml

@@ -5,6 +5,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   verify:
     name: Build, Test, Lint & Format Check

.github/workflows/release.yml

@@ -43,3 +43,5 @@ jobs:
 
       - name: Release
         run: pnpm release -- --increment=${{ github.event.inputs.version }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}