Add permissions to publish.yml and test.yml

[AshelyTC]

Purpose

Addresses

• https://github.com/github/dependency-submission-toolkit/security/code-scanning/14
• https://github.com/github/dependency-submission-toolkit/security/code-scanning/13

Related Issues

What issues does this PR close or relate to?

[Copilot]

Pull Request Overview

This PR adds explicit permissions to GitHub Actions workflows to address security vulnerabilities by following the principle of least privilege. The changes restrict default permissions and explicitly grant only the minimal permissions required for each workflow.

• Adds read-only content permissions to the test workflow
• Adds content read and package write permissions to the publish workflow

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/test.yml	Adds minimal read permissions for test workflow
.github/workflows/publish.yml	Adds read and write permissions needed for publishing packages

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
You can also share your feedback on Copilot code review for a chance to win a $100 gift card. Take the survey.}