chore: add read permissions (#68)

On-behalf-of: Gerald Morrison (SAP) <[email protected]>
Signed-off-by: Gerald Morrison (SAP) <[email protected]>

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it
Add permissions to just allow "read" content.

Signed-off-by: Gerald Morrison (SAP) <[email protected]>
Co-authored-by: Gerald Morrison (SAP) <[email protected]>

Author: morri-son

.github/workflows/rotate-bdba-token.yml

@@ -2,6 +2,9 @@
 # The token is used in the worklfow bdba.yaml and stored as a secret on org level
 name: BDBA Token Rotation
 
+permissions:
+  contents: read
+
 on:
   schedule:
     - cron: '37 2 1 * *' # Run on every 1st of month 2:37 AM UTC