Specify explicit contents: read workflow permissions

This resolves a CodeQL check and is also just a good idea.

See GitoxideLabs/prodash#36.

Author: EliahKagan

.github/workflows/markdown-links.yml

@@ -6,6 +6,9 @@ on:
   schedule:
     - cron: '15 0,12 * * *'
 
+permissions:
+  contents: read
+
 jobs:
   markdown-link-check:
     runs-on: ubuntu-latest

.github/workflows/test.yml

@@ -2,6 +2,9 @@ name: Test
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   pytest-conda:
     name: pytest (conda)