Add top-level permissions to CodeQL workflow

FIX: Missing workflow-level permissions causing PR write failures
- Added top-level permissions section to codeql.yml workflow
- Ensures pull-requests: write is available at workflow level
- Maintains existing job-level permissions for compatibility

PERMISSIONS ADDED:
- actions: read
- contents: read
- security-events: write
- pull-requests: write

This resolves the 'Unable to write summary to pull-request' warning
by ensuring permissions are available at both workflow and job levels.

Author: kri2tle

.github/workflows/codeql.yml

@@ -8,6 +8,12 @@ on:
   schedule:
     - cron: '30 2 * * 1'
 
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+  pull-requests: write
+
 jobs:
   analyze:
     name: Analyze