Fix PR and CI workflow

[satyakigh]

Fix PR and CI workflow

• General fix: Add a permissions block to the get-configs job, explicitly restricting unnecessary repository access and specifying the minimum required scope.
• Detailed fix: Since the get-configs job simply calls a reusable workflow and, based on its naming and usage, is unlikely to need write access, the minimal appropriate permissions would be contents: read. Place a permissions: block under get-configs: at the same indentation level as uses:.
• Files/regions/lines to change: In .github/workflows/pr.yml, update lines 8–10 to insert a permissions: block with appropriate contents before the uses: line.
• Methods/imports/definitions required: No new methods, imports, or outside definitions are needed; only a YAML block addition.

---

To fix this problem, we should specify a permissions block for the pr-build-test-go job, explicitly limiting the permissions granted to the GITHUB_TOKEN. Reviewing the pr-build-test-go job, none of its steps requires write access to repository contents, pull requests, or any other resource. Thus, the minimal required permission is contents: read, which allows the job to check out code but does not grant unnecessary write privileges.

You should add the following block beneath runs-on: ubuntu-latest within the pr-build-test-go job:

permissions:
  contents: read

This change is entirely localized to lines 56-57 (runs-on to first steps:) and does not interfere with existing functionality.

[github-actions]

Package	Line Rate	Branch Rate	Complexity	Health
ai	22%	80%	0	❌
ai.llm	53%	80%	0	❌
app	0%	0%	0	❌
artifacts	100%	100%	0	✔
auth	87%	92%	0	✔
autocomplete	93%	91%	0	✔
context	95%	95%	0	✔
context.semantic	98%	97%	0	✔
context.semantic.parameter	100%	95%	0	✔
context.syntaxtree	89%	91%	0	✔
context.syntaxtree.utils	84%	90%	0	➖
datastore	77%	97%	0	❌
definition	100%	100%	0	✔
document	93%	96%	0	✔
documentSymbol	93%	81%	0	✔
handlers	74%	87%	0	❌
hover	84%	86%	0	➖
protocol	96%	100%	0	✔
resourceState	75%	79%	0	❌
schema	88%	87%	0	✔
schema.transformers	83%	84%	0	➖
server	97%	96%	0	✔
services	66%	89%	0	❌
services.cfnLint	72%	91%	0	❌
services.guard	95%	79%	0	✔
services.guard.assets	81%	77%	0	➖
settings	97%	87%	0	✔
stacks	100%	100%	0	✔
telemetry	58%	78%	0	❌
templates	89%	84%	0	✔
utils	91%	93%	0	✔
Summary	86% (16569 / 19286)	89% (3398 / 3820)	0	✔