Set explicit workflow token permissions

Agent-Logs-Url: https://github.com/microsoft/vscode-js-debug/sessions/99bb2584-ade8-479e-a4a2-c4f0e805a02a

Author: Copilot

.github/workflows/node22-compile-test.yml

@@ -7,6 +7,8 @@ on:
 jobs:
   compile-and-test:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     steps:
       - name: Checkout repository