Add read only permissions to test-publish

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: zacharyfleck

.github/workflows/test-publish.yaml

@@ -4,6 +4,8 @@ on:
     branches:
       - "main"
   workflow_dispatch:
+permissions:
+  contents: read
 jobs:
   test:
     uses: ./.github/workflows/test.yaml