Pass contents read permission to build image workflow

[theseanything]

This is required as the reusuable workflow no requires that permission to be explicitly passed it. This is so the reusuable workflow can checkout the repository if it private.