ci: add permissions: contents: read to test job to fix CodeQL finding

Agent-Logs-Url: https://github.com/GoCodeAlone/workflow-plugin-github/sessions/fd1e783c-d22a-4848-8ff1-6b2c7b9176e2

Co-authored-by: intel352 <77607+intel352@users.noreply.github.com>

Author: Copilot

.github/workflows/ci.yml

@@ -7,6 +7,8 @@ on:
 jobs:
   test:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-go@v6