Add Appropriate Token Permission for CodeQL Workflow

[afshin]

cf jupyterlab/frontends-team-compass#125

[codecov-commenter]

Codecov Report

Merging #489 (265abd2) into master (d3b40f4) will decrease coverage by 0.08%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master     #489      +/-   ##
==========================================
- Coverage   77.81%   77.73%   -0.09%     
==========================================
  Files         106      106              
  Lines        9269     9269              
  Branches      997      997              
==========================================
- Hits         7213     7205       -8     
- Misses       1702     1707       +5     
- Partials      354      357       +3     

Impacted Files	Coverage Δ
jupyter_server/tests/services/kernels/test_api.py	97.05% <0.00%> (-1.97%)	⬇️
jupyter_server/services/kernels/handlers.py	61.37% <0.00%> (-1.59%)	⬇️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d3b40f4...265abd2. Read the comment docs.

[kevin-bates]

This looks good and analogous to that done in lab.