Add contents read permission to snapshot workflow

[bernardladenthin]

Summary

Added explicit contents: read permission to the snapshot workflow's build job to follow GitHub Actions security best practices.

Key Changes

• Added permissions block with contents: read to the build job in .github/workflows/snapshot.yml

Implementation Details

This change implements the principle of least privilege by explicitly declaring the minimum required permissions for the workflow job. The contents: read permission allows the job to read repository contents (needed for the actions/checkout@v4 step) while restricting other potentially unnecessary permissions by default.

https://claude.ai/code/session_018GqGrJWwE6Fhw9UPy6ViEv

[codecov]

❌ 1 Tests Failed:

Tests completed	Failed	Passed	Skipped
267	1	266	0

View the top 1 failed test(s) by shortest run time

mutation survivors — boundary conditions and arithmetic::trim_closeCalledDuringTrim_handlesGracefully

Stack Traces | 0.014s run time

Multiple Failures (1 failure)
	java.lang.AssertionError: Trim should not throw exception
Expected: is null
     but: was <java.io.IOException: Stream closed.>

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}