fix(ci): set explicit workflow token permissions

Author: asiridalugoda

.github/workflows/ci.yml

@@ -9,6 +9,9 @@ on:
 env:
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test