Update workflow permissions

[martincostello]

Set workflow permissions to none and add job-level permissions instead.

[Copilot]

Pull Request Overview

This pull request updates GitHub workflow permissions by setting workflow-level permissions to none ({}) and moving the contents: read permission to the job level for better security isolation. This follows the principle of least privilege by ensuring only individual jobs have access to the permissions they need.

Key changes:

• Workflow-level permissions changed from contents: read to empty object
• Job-level permissions added with contents: read for each job
• Consistent permission structure applied across all workflows

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
.github/workflows/lint.yml	Moved contents: read permission from workflow to job level
.github/workflows/build.yml	Moved contents: read permission from workflow to job level
.github/workflows/benchmark.yml	Moved contents: read permission from workflow to job level

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}