Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: bboilot-ledger

.github/workflows/ci.yaml

@@ -5,6 +5,9 @@ on:
     branches: [ "master" ]
   pull_request:
 
+permissions:
+  contents: read
+
 env:
   CARGO_TERM_COLOR: always