Add top-level permissions to workflow files for security best practices

Co-authored-by: rajbos <6085745+rajbos@users.noreply.github.com>

Author: Copilot

.github/workflows/ci.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ main, develop ]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/release.yml

@@ -12,6 +12,9 @@ on:
         default: 'true'
         type: boolean
 
+permissions:
+  contents: read
+
 jobs:
   release:
     permissions: 

.github/workflows/sync-release-notes.yml

@@ -5,6 +5,9 @@ on:
   release:
     types: [published, edited]  # Automatic trigger when releases are published or edited
 
+permissions:
+  contents: read
+
 jobs:
   sync-release-notes:
     runs-on: ubuntu-latest