Add explicit permissions to workflows for security

Co-authored-by: nhorton <204146+nhorton@users.noreply.github.com>

Author: Copilot

.github/workflows/claude-code-test.yml

@@ -21,6 +21,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
   cancel-in-progress: true
 
+# Minimal permissions for this workflow
+permissions:
+  contents: read
+
 jobs:
   # Job for PRs - always passes, actual validation happens in merge queue
   pr-check:

.github/workflows/validate.yml

@@ -7,6 +7,10 @@ on:
     branches: [main]
   workflow_dispatch:
 
+# Minimal permissions for this workflow
+permissions:
+  contents: read
+
 jobs:
   tests:
     runs-on: ubuntu-latest