fix: add security-events write permission for SARIF upload

The CodeQL/Trivy SARIF upload requires security-events: write permission
to upload scan results to GitHub Security tab.

Author: joaquinbejar

.github/workflows/security.yml

@@ -9,6 +9,10 @@ on:
     # Run weekly on Mondays at 00:00 UTC
     - cron: "0 0 * * 1"
 
+permissions:
+  contents: read
+  security-events: write
+
 env:
   CARGO_TERM_COLOR: always