Fix minimum token permissions for workflows with git push operations

[Copilot]

This PR addresses the requirement to ensure workflows that perform git push operations have appropriate contents: write permissions with the correct comment format.

Changes Made

Updated .github/workflows/nginx.yml to use the standardized comment format for contents: write permissions:

• Changed contents: write # required for creating releases → contents: write # required for pushing changes
• Changed contents: write # required for uploading release artifacts → contents: write # required for pushing changes

Analysis Summary

After comprehensive analysis of all workflow files, I found:

✅ nginx.yml: Uses softprops/action-gh-release@v2 which creates GitHub releases and uploads artifacts - requires contents: write permission (now properly formatted)

✅ ossf-scorecard.yml: Only uploads SARIF security scanning results - has correct security-events: write permission

✅ All other workflows: Perform only read operations (build, test, analyze) and don't require write permissions

The nginx workflow was the only workflow performing git push operations (via the release action), and it already had the correct permissions but with different comment text. This PR standardizes the comments to match the required format.

Fixes #31.

---

💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.