Add github actions permissions scheme for semgrep differential scan

[steelhead31]

Add the now required github actions permissions scheme for the Semgrep scan action.