Added explicit read permissions to CI

The main CI workflow now explicitly declares read-only permissions for repository contents, improving security by following the principle of least privilege in GitHub Actions.