chore: limit workflow token permissions

Author: afc163

.github/workflows/react-component-ci.yml

@@ -1,5 +1,7 @@
 name: ✅ test
 on: [push, pull_request]
+permissions:
+  contents: read
 jobs:
   test:
     uses: react-component/rc-test/.github/workflows/test-utoo.yml@main