ci: fix permissions

Author: Boshen

.github/workflows/ci.yml

@@ -1,5 +1,7 @@
 name: CI
 
+permissions: {}
+
 on:
   pull_request:
     types:

.github/workflows/release.yml

@@ -1,5 +1,7 @@
 name: Release
 
+permissions: {}
+
 on:
   push:
     branches:

.github/workflows/zizmor.yml

@@ -1,5 +1,7 @@
 name: GitHub Actions Security Analysis
 
+permissions: {}
+
 on:
   workflow_dispatch:
   pull_request:
@@ -12,8 +14,6 @@ on:
     paths:
       - ".github/workflows/**"
 
-permissions: {}
-
 jobs:
   zizmor:
     name: zizmor