Add write permission for security events

[jfversluis]

Noticed CI wasn't running for #58 and there was an error in the GH Action saying that this change was needed.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[Copilot]

Pull Request Overview

This PR adds the security-events: write permission to the CI workflow to enable uploading security scan results to GitHub's code scanning feature. The security-scan reusable workflow uses the CodeQL action to upload SARIF files, which requires this permission to be granted at the calling workflow level.

• Added security-events: write permission to enable SARIF upload to GitHub code scanning
• Fixed trailing whitespace on the node_version parameter

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.