ci: fix for Workflow does not contain permissions

[fzipi]

Potential fix for https://github.com/coreruleset/secrules_parsing/security/code-scanning/2

In general, the fix is to add an explicit permissions block to the workflow (either at the top level or per job) and set it to the minimal access required. For a regression test workflow that only checks out code and runs tests, read-only repository contents are sufficient in most cases, so contents: read is an appropriate baseline.

The single best fix here is to define workflow-wide permissions just under the name and on keys, so they apply to all jobs that don’t override them. The existing steps (actions/checkout, actions/setup-python, abatilo/actions-poetry, and running tests/commands) all function correctly with only read access to repository contents and default read access to other scopes. No changes to the job steps are necessary. Concretely, in .github/workflows/test.yml, insert:

permissions:
  contents: read

between the on: [push, pull_request] line and the jobs: line. No imports or other definitions are needed as this is purely a YAML configuration change.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.