ci: set workflow permissions to read-only by default (#137)

Author: Fdawgs

.github/workflows/ci.yml

@@ -14,6 +14,9 @@ on:
       - 'docs/**'
       - '*.md'
 
+permissions:
+  contents: read
+
 jobs:
   dependency-review:
     name: Dependency Review