fix(ci): remove job-level permissions from reusable workflow (#33)

Job-level permissions in reusable workflows can cause startup failures
when called from other workflows. Keep only continue-on-error for
graceful handling of SARIF upload failures.

Co-authored-by: rafaelrsantosti <11065120+rafaelrsantosti@users.noreply.github.com>

Author: rafaelrsantosti

.github/workflows/tests.yml

@@ -243,9 +243,6 @@ jobs:
     name: Security Scan
     needs: changes
     if: needs.changes.outputs.api == 'true' || needs.changes.outputs.portal == 'true'
-    permissions:
-      contents: read
-      security-events: write
 
     steps:
       - name: Checkout code