fix: add required permissions for CodeQL analysis workflow

[yfodil]

Community Note

• Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for pull request followers and do not help prioritize the request

Relates OR Closes #0000

Release note for CHANGELOG:

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 56.22%. Comparing base (5bf53e0) to head (9b13f47).
⚠️ Report is 759 commits behind head on master.

❗ There is a different number of reports uploaded between BASE (5bf53e0) and HEAD (9b13f47). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (5bf53e0)	HEAD (9b13f47)
	2	1

Additional details and impacted files

@@ Coverage Diff @@ ## master #4942 +/- ## =========================================== - Coverage 75.45% 56.22% -19.24%  =========================================== Files 202 308 +106 Lines 44323 77889 +33566 =========================================== + Hits 33444 43792 +10348  - Misses 9653 32690 +23037  - Partials 1226 1407 +181 

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.