e89faeccae
Add top-level `permissions: contents: read` to the tests workflow, addressing CodeQL alerts about missing GITHUB_TOKEN permissions. Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>