fix(ci): move the permissions setting to jobs

Refs: woodruffw/zizmor#95

Signed-off-by: Mike Fiedler <miketheman@gmail.com>

.github/workflows/zizmor.yml

@@ -7,14 +7,12 @@ on:
   pull_request:
     branches: ["*"]
 
-permissions:
-  contents: read
-
 jobs:
   zizmor:
     name: Zizmor latest via Cargo
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       security-events: write
     steps:
       - name: Checkout repository