Add missing permission for security_events

Author: sean-breen

.github/workflows/ci.yml

@@ -85,6 +85,8 @@ jobs:
   vulnerability-scan:
     name: Vulnerability Scan
     uses: ./.github/workflows/vulncheck.yml
+    permissions:
+      security-events: write
     with:
       target-branch: ${{ github.event.pull_request.base.ref || github.ref_name }}
       go-version-input: '1.24.10'