Fix codeql workflow permissions

[pjbgf]

What type of PR is this?

/kind cleanup
/kind regression

What this PR does / why we need it:

The changes on #737 made the analyze workflow to stop working at the branch main:

Further analysis showed that the issue was the codeql-action trying to PUT an analysis status:

This PR adds security-events: write for those workflows only, which is aligned with the recomendations from the component's documentation.

Which issue(s) this PR fixes:

None

Does this PR have test?

N/A

Special notes for your reviewer:

Does this PR introduce a user-facing change?

NONE

[codecov-commenter]

Codecov Report

Merging #739 (9258f07) into main (c2c7fcf) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #739   +/-   ##
=======================================
  Coverage   53.94%   53.94%           
=======================================
  Files          41       41           
  Lines        4121     4121           
=======================================
  Hits         2223     2223           
  Misses       1831     1831           
  Partials       67       67           

[pjbgf]

Another occurrency of flakeness on fedora-e2e:
--- FAIL: TestSuite/TestSecurityProfilesOperator/cluster-wide:_Seccomp:_Verify_profile_recording_bpf (248.72s)

[pjbgf]

fedora-e2e flakeness:
--- FAIL: TestSuite/TestSecurityProfilesOperator/cluster-wide:_Seccomp:_Verify_profile_recording_bpf (234.79s)

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: pjbgf, saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [pjbgf,saschagrunert]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment