Update workflow permissions

[martincostello]

Set workflow permissions to none and add job-level permissions instead.

[Copilot]

Pull Request Overview

This PR updates GitHub Actions workflow permissions by removing global workflow-level permissions and implementing job-level permissions instead. This follows security best practices by applying the principle of least privilege at a more granular level.

• Removes global contents: read permissions from workflow level
• Adds empty permissions object {} at workflow level to explicitly deny all default permissions
• Moves contents: read permission to individual job level in dependency-review workflow

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/dependency-review.yml	Moves contents permission from workflow to job level
.github/workflows/build.yml	Removes global contents permission, sets empty permissions

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

The build job may require permissions to function properly. Consider adding job-level permissions for the build job similar to how it was done in dependency-review.yml, or verify that the build job doesn't need any permissions.

Suggested change

permissions: {}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.59%. Comparing base (aa46700) to head (4eb5e0c).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #996   +/-   ##
=======================================
  Coverage   98.59%   98.59%           
=======================================
  Files          16       16           
  Lines         284      284           
  Branches       37       37           
=======================================
  Hits          280      280           
  Misses          2        2           
  Partials        2        2           

Flag	Coverage Δ
linux	98.59% <ø> (ø)
macos	98.59% <ø> (+0.70%)	⬆️
windows	98.59% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.