Potential fix for code scanning alert no. 1: Workflow does not contain permissions

[CorentinGS]

Potential fix for https://github.com/CorentinGS/chess/security/code-scanning/1

The best fix is to add an explicit permissions block to the setup job at the same level as runs-on in the .github/workflows/ci.yaml file. Since the setup job only checks out code and sets up Go, both of which require only read access to repository contents, the minimal permission required is contents: read. No additional imports, method definitions, or configuration are necessary. This change is limited to the YAML workflow file; only the setup job needs to be edited.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[Copilot]

Pull Request Overview

Addresses a security code scanning alert by adding explicit permissions to the GitHub Actions workflow. The fix implements the principle of least privilege by restricting the setup job to only read repository contents.

• Adds explicit permissions block to the setup job in the CI workflow
• Restricts permissions to contents: read for the setup job that only needs to checkout code and configure Go

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 68.51%. Comparing base (eefa43f) to head (f02ec2c).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #74   +/-   ##
=======================================
  Coverage   68.51%   68.51%           
=======================================
  Files          27       27           
  Lines        4872     4872           
=======================================
  Hits         3338     3338           
  Misses       1410     1410           
  Partials      124      124           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.