Fix workflow permissions for security scan

[huseyinbabal]

Summary

Fix the GitHub Actions workflow error:

The nested job 'security-scan' is requesting 'actions: read, security-events: write', 
but is only allowed 'actions: none, security-events: none'.

Solution

Add required permissions at the workflow level:

permissions:
  contents: read
  actions: read
  security-events: write

This allows the reusable workflow's security-scan job to:

• Read actions metadata (actions: read)
• Write security scan results to the Security tab (security-events: write)

Type of Change

• Bug fix (non-breaking change that fixes an issue)