CodeQL - add permissions to GH workflows #93

Job	Run time
Dockerfile_openexr3-repo-root	6m 28s
fedora-36	2m 42s
Dockerfile-repo-root	4m 28s
fedora-37	2m 38s
redhat-ubi8	4m 36s
redhat-ubi9	5m 22s
ubuntu-18-04	1m 34s
ubuntu-20-04	1m 37s
ubuntu-22-04	1m 28s
ubuntu-22-04-LTO	2m 21s
ubuntu-latest	1m 52s
fedora-38	2m 39s
ubuntu-22-04-openexr33	3m 52s
ubuntu-openexr2-shared	2m 48s
fedora-latest	2m 14s
ubuntu-openexr2-static	3m 0s
	49m 39s

Provide feedback