ci: limit reusable workflow secrets

Author: afc163

.github/workflows/react-component-ci.yml

@@ -1,6 +1,9 @@
 name: ✅ test
 on: [push, pull_request]
+permissions:
+  contents: read
 jobs:
   test:
     uses: react-component/rc-test/.github/workflows/test-utoo.yml@main
-    secrets: inherit
+    secrets:
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}