Address code review feedback: add permissions, prevent infinite loops, simplify dependency install

Co-authored-by: SomethingGeneric <[email protected]>

Author: Copilot

.github/workflows/lint.yml

@@ -10,6 +10,8 @@ jobs:
   pylint:
     name: Pylint
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v4
 
@@ -22,7 +24,7 @@ jobs:
         run: |
           python -m pip install --upgrade pip
           pip install pylint
-          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
+          pip install -r requirements.txt
       
       - name: Run Pylint
         run: |
@@ -33,6 +35,8 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+    # Skip if the last commit was from github-actions[bot] to avoid infinite loops
+    if: github.actor != 'github-actions[bot]'
     steps:
       - uses: actions/checkout@v4
         with:
@@ -63,6 +67,6 @@ jobs:
         run: |
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add -A
+          git add .
           git commit -m "Apply black formatting"
           git push