security: Add explicit permissions to workflow jobs

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Author: Copilot

.github/workflows/ci.yml

@@ -11,6 +11,9 @@ jobs:
     name: Build and Type Check
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+
     strategy:
       matrix:
         node-version: [18.x, 20.x]

.github/workflows/code-quality.yml

@@ -10,6 +10,9 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event_name == 'pull_request'
 
+    permissions:
+      contents: read
+
     steps:
       - name: Checkout code
         uses: actions/checkout@v4