Actions: Add workflow permissions per CodeQL

Author: kyleecodes

.github/workflows/.ci.yml

@@ -6,6 +6,10 @@ on:
   push:
     branches: [develop]
 
+permissions:
+  contents: read
+  checks: write
+
 jobs:
   build:
     runs-on: ubuntu-24.04

.github/workflows/create-release-pr.yml

@@ -4,6 +4,10 @@ on:
   push:
     branches: [develop]
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   create-pr-to-main:
     name: Create release PR to main

.github/workflows/newrelic-release-tracking.yml

@@ -4,6 +4,9 @@ on:
   push:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   newrelic:
     runs-on: ubuntu-24.04