lint: update action top level permission to readonly

.github/workflows/build.yml

@@ -6,6 +6,8 @@ on:
   pull_request:
     branches: [ "master" ]
 
+permissions: read-all
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/codeql-analysis.yml

@@ -9,6 +9,8 @@ on:
   schedule:
     - cron: "17 18 * * 1"
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze

.github/workflows/linter.yml

@@ -6,6 +6,8 @@ on:
     branches: ["master"]
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
   build:
     runs-on: ubuntu-latest