Use explicit workflow perms

Author: ecraig12345

.github/workflows/pr.yml

@@ -13,6 +13,8 @@ concurrency:
   group: pr-${{ github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   build:
     strategy:

.github/workflows/release.yml

@@ -11,6 +11,8 @@ on:
 env:
   npmVersion: 8
 
+permissions: {}
+
 jobs:
   build:
     runs-on: ubuntu-latest