ci: CodeQL complains if i don't do this

Author: practicemedicine

.github/workflows/build.yml

@@ -1,5 +1,6 @@
 name: Build AridityTeam.Ascorbic
-
+permissions:
+  contents: write
 on:
   push:
     branches: [ "master" ]

.github/workflows/docfx.yml

@@ -1,15 +1,17 @@
+name: Deploy DocFX site to GitHub Pages
+
+permissions:
+  actions: read
+  pages: write
+  id-token: write
+
 on:
   push:
     branches: [ "master" ]
     paths:
         - ".github/workflows/**"
         - "docfx/**"
 
-permissions:
-  actions: read
-  pages: write
-  id-token: write
-
 concurrency:
   group: "pages"
   cancel-in-progress: false

.github/workflows/publish.yml

@@ -1,5 +1,9 @@
 name: Publish NuGet Package
 
+permissions:
+  contents: write
+  packages: write
+
 on:
   release:
     types: [published, prereleased]