fix: add contents:read permission to Scorecard workflow

[liudger]

This pull request makes a small update to the .github/workflows/scorecard.yml workflow by adding explicit contents: read permission. This clarifies the permissions required for the workflow to run successfully.

[Copilot]

Pull request overview

Adds an explicit contents: read permission to the Scorecard workflow’s analysis job to ensure the job still has repository read access when job-level permissions are specified.

Changes:

• Explicitly grants contents: read at the job level in .github/workflows/scorecard.yml.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.89%. Comparing base (ed54f8b) to head (c9e9edd).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1443   +/-   ##
=======================================
  Coverage   99.89%   99.89%           
=======================================
  Files           6        6           
  Lines         955      955           
  Branches      128      128           
=======================================
  Hits          954      954           
  Partials        1        1           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud