ci(test): set permissions in test workflow (#247)

-
https://github.com/actions/create-github-app-token/security/code-scanning/13
-
https://github.com/actions/create-github-app-token/security/code-scanning/14

This defines `permissions` on the `test.yml` workflow to align with our
Actions security best-practices and ensure workflows only have the
minimum required permissions.

Co-authored-by: Parker Brown <[email protected]>

Author: joshmgross

.github/workflows/test.yml

@@ -11,6 +11,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   integration:
     name: Integration