ci: add least-privilege permissions block

Author: nunomaduro

.github/workflows/tests.yml

@@ -2,6 +2,9 @@ name: Tests
 
 on: ['push', 'pull_request']
 
+permissions:
+  contents: read
+
 jobs:
   ci:
     runs-on: ${{ matrix.os }}
@@ -38,4 +41,4 @@ jobs:
         composer-options: "--prefer-dist"
 
     - name: Run Tests
-      run: vendor/bin/pest --display-deprecation ${{ matrix.dependency-version == 'highest' && '--fail-on-deprecation' || '' }}
+      run: vendor/bin/pest --display-deprecation ${{ matrix.dependency-version == 'highest' && '--fail-on-deprecation' || '' }}