ci: Set default permissions

Author: koki-develop

.github/workflows/claude-renovate-review.ts

@@ -5,6 +5,7 @@ const workflow = new Workflow("Claude Renovate Review", {
   on: {
     pullRequest: { types: ["opened", "edited"] },
   },
+  permissions: {},
   concurrency: {
     group: "${{ github.workflow }}-${{ github.ref }}",
     cancelInProgress: true,

.github/workflows/claude-renovate-review.yml

@@ -1,4 +1,4 @@
 # DO NOT EDIT THIS FILE
 # This file is automatically generated by ghats (https://www.npmjs.com/package/ghats)
 # Edit the workflow in .github/workflows/claude-renovate-review.ts instead, and run `ghats build` to update this file.
-{"name":"Claude Renovate Review","on":{"pull_request":{"types":["opened","edited"]}},"concurrency":{"group":"${{ github.workflow }}-${{ github.ref }}","cancel-in-progress":true},"jobs":{"claude-code-review":{"runs-on":"ubuntu-latest","permissions":{"contents":"read","pull-requests":"write"},"timeout-minutes":30,"if":"github.event.pull_request.user.login == 'renovate[bot]'","steps":[{"with":{"persist-credentials":"false"},"uses":"actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683"},{"with":{"claude-code-oauth-token":"${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}","allowed-tools":"WebFetch(domain:github.com)\nWebFetch(domain:raw.githubusercontent.com)\nWebFetch(domain:www.npmjs.com)"},"uses":"koki-develop/claude-renovate-review@cda94ca660ec4eb22dc7808745e6e511b98b6ebc"}]}}}
+{"name":"Claude Renovate Review","on":{"pull_request":{"types":["opened","edited"]}},"permissions":{},"concurrency":{"group":"${{ github.workflow }}-${{ github.ref }}","cancel-in-progress":true},"jobs":{"claude-code-review":{"runs-on":"ubuntu-latest","permissions":{"contents":"read","pull-requests":"write"},"timeout-minutes":30,"if":"github.event.pull_request.user.login == 'renovate[bot]'","steps":[{"with":{"persist-credentials":"false"},"uses":"actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683"},{"with":{"claude-code-oauth-token":"${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}","allowed-tools":"WebFetch(domain:github.com)\nWebFetch(domain:raw.githubusercontent.com)\nWebFetch(domain:www.npmjs.com)"},"uses":"koki-develop/claude-renovate-review@cda94ca660ec4eb22dc7808745e6e511b98b6ebc"}]}}}