ci: explicit actions permissions

Author: ricellis

.github/workflows/codeql.yml

@@ -6,6 +6,7 @@ on:
     branches: ['main']
   schedule:
   - cron: '00 4 * * 2'
+permissions: {}
 jobs:
   analyze:
     name: Analyze

.github/workflows/docs.yml

@@ -2,6 +2,7 @@ name: docs
 on:
   pull_request:
     branches: ['main']
+permissions: {}
 jobs:
   docs:
     runs-on: ubuntu-latest

.github/workflows/test.yml

@@ -4,6 +4,7 @@ on:
     branches: ['main']
   pull_request:
     branches-ignore: ['gh-pages']
+permissions: {}
 env:
   SERVER_AUTH_TYPE: basic
   SERVER_URL: http://127.0.0.1:5984