add contents:read permission to test workflow

otherwise it fails on private repos

Author: ilia-kats

{{cookiecutter.project_name}}/.github/workflows/test.yaml

@@ -48,6 +48,7 @@ jobs:
     needs: get-environments
     permissions:
        id-token: write  # for codecov OIDC
+       contents: read
 
     strategy:
       fail-fast: false