Tighten up workflow permissions

Address workflow permission security weakness by restriction workflow to only the necessary "read"
permission.

Signed-off-by: Winford <[email protected]>

Author: UncleGrumpy

.github/workflows/build-and-test.yaml

@@ -14,6 +14,8 @@ jobs:
     strategy:
       matrix:
         otp: ["25", "26", "27"]
+    permissions:
+      contents: read
 
     steps:
     # Setup