Remove redundant contents:read from job-specific permission blocks

Co-authored-by: trask <[email protected]>

Author: Copilot

.github/workflows/codeql.yml

@@ -17,7 +17,6 @@ jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
     permissions:
-      contents: read
       actions: read  # for github/codeql-action/init to get workflow details
       security-events: write  # for github/codeql-action/analyze to upload SARIF results
     strategy:
@@ -63,7 +62,6 @@ jobs:
 
   workflow-notification:
     permissions:
-      contents: read
       issues: write
     needs:
       - analyze

.github/workflows/issue-management-feedback-label.yml

@@ -10,7 +10,6 @@ permissions:
 jobs:
   issue_comment:
     permissions:
-      contents: read
       issues: write
       pull-requests: write
     if: >

.github/workflows/issue-management-stale-action.yml

@@ -11,7 +11,6 @@ permissions:
 jobs:
   stale:
     permissions:
-      contents: read
       issues: write  # for actions/stale to close stale issues
       pull-requests: write  # for actions/stale to close stale PRs
     runs-on: ubuntu-latest

.github/workflows/ossf-scorecard.yml

@@ -14,7 +14,6 @@ permissions:
 jobs:
   analysis:
     permissions:
-      contents: read
       # Needed for Code scanning upload
       security-events: write
       # Needed for GitHub OIDC token if publish_results is true

.github/workflows/reusable-workflow-notification.yml

@@ -15,7 +15,6 @@ permissions:
 jobs:
   workflow-notification:
     permissions:
-      contents: read
       issues: write
     runs-on: ubuntu-latest
     steps: