chore(ci): restrict workflow permissions

[rhamzeh]

Description

References

Review Checklist

• [x] I have clicked on "allow edits by maintainers".
• [ ] I have added documentation for new/changed functionality in this PR or in a PR to openfga.dev [Provide a link to any relevant PRs in the references section above]
• [x] The correct base branch is being used, if not main
• [ ] I have added tests to validate that the change in functionality is working as expected

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 31.15%. Comparing base (f76e9eb) to head (6e21b1a).

Additional details and impacted files

```diff @@ Coverage Diff @@ ## main #77 +/- ## ======================================= Coverage 31.15% 31.15% ======================================= Files 122 122 Lines 6083 6083 Branches 785 785 ======================================= Hits 1895 1895 Misses 4030 4030 Partials 158 158 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.