update permissions

Author: cnuss

.github/workflows/push-main.yml

@@ -10,6 +10,7 @@ env:
   NODE_ENV: nonlive
 
 permissions:
+  contents: read
   id-token: write
 
 jobs:
@@ -21,7 +22,6 @@ jobs:
       !contains(github.event.head_commit.message, '[skip ci]')
     steps:
       - uses: actions/checkout@v4
-
       - uses: actions/setup-node@v4
         with:
           node-version: "18"