ci: set explicit permissions on code-analysis workflow

Hopefully this fixes the CI actions on the `main`/`master` branches.

See: github/codeql-action#464
See: https://github.com/scality/changelog-binder/runs/2896442908?check_suite_focus=true
See: #29

.github/workflows/codeql-analysis.yml

@@ -13,6 +13,12 @@ name: "CodeQL"
       - "master"
       - "development/*"
 
+permissions:
+  actions: read
+  contents: read
+  pull-requests: read
+  security-events: write
+
 jobs:
   analyze:
     name: Analyze