fix: workflow permission to upload trivy sarif report

[cdivitotawela]

PR description

Trivy scan result upload to GitHub fails due to permission issue. Added permission security-events=write to the workflow file as a fix. Since workflow permission explicitly defined, it requires contents=read explicity set as well

Fixed Issue(s)

Thanks for sending a pull request! Have you done the following?

• [x] Checked out our contribution guidelines?
• [x] Considered documentation and added the doc-change-required label to this PR if updates are required.
• [x] Considered the changelog and included an update if required.
• [x] For database changes (e.g. KeyValueSegmentIdentifier) considered compatibility and performed forwards and backwards compatibility tests

Locally, you can run these tests to catch failures early:

• [x] unit tests: ./gradlew build
• [x] acceptance tests: ./gradlew acceptanceTest
• [x] integration tests: ./gradlew integrationTest
• [ ] reference tests: ./gradlew ethereum:referenceTests:referenceTests