chore: Add explicit permissions to CodeQL workflow

[srprash]

Summary

This PR adds an explicit permission declaration to the CodeQL workflow to follow security best practices and the principle of least privilege.

Changes

.github/workflows/codeql-analysis.yml

• Added security-events: write permission
• This permission is required for CodeQL to publish security scan results to GitHub's security dashboard

Why this change?

1. Security best practice: Explicitly declaring permissions makes it clear what access the workflow requires
2. Principle of least privilege: Instead of relying on default GitHub token permissions, we declare only what's needed
3. Auditability: Makes it easier to review and audit workflow permissions across the repository
4. Compliance: Aligns with GitHub's recommended security practices for Actions workflows

Testing

• The change is declarative and doesn't modify workflow logic
• CodeQL workflow will continue to function with the added permission