ci(codeql): set explicit permissions

Author: JonZeolla

.github/workflows/security.yml

@@ -4,6 +4,9 @@ name: "Security"
 on:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 env:
   python_version: "3.13"
 

{{cookiecutter.project_name|replace(" ", "")}}/.github/workflows/security.yml

@@ -14,6 +14,9 @@ on:
 {%- endif %}
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 env:
   python_version: "{{ cookiecutter.python_version }}"