fix token permissions

Author: Kocal

.github/workflows/dist-files-size-diff.yaml

@@ -11,6 +11,7 @@ jobs:
     dist-files-size-diff:
         runs-on: ubuntu-latest
         permissions:
+          contents: 'read'
           pull-requests: write # for marocchino/sticky-pull-request-comment@v2
         steps:
           - name: Configure git