Potential fix for code scanning alert no. 21: Workflow does not contain permissions (#23796)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

.github/workflows/default.yml

@@ -138,6 +138,8 @@ jobs:
 
   ui:
     name: UI
+    permissions:
+      contents: read
     runs-on: depot-ubuntu-24.04-arm
 
     steps:

.github/workflows/docs-issue.yml

@@ -1,4 +1,7 @@
 name: Create Documentation Issue
+permissions:
+  issues: write
+  contents: read
 
 on:
   pull_request_target:

.github/workflows/nightly.yml

@@ -1,4 +1,6 @@
 name: Nightly Build
+permissions:
+  contents: read
 
 on:
   schedule: # runs on the default branch: master

.github/workflows/release.yml

@@ -15,6 +15,8 @@ jobs:
     needs:
       - call-build-workflow
     runs-on: depot-ubuntu-24.04-arm
+    permissions:
+      contents: read
 
     steps:
       - uses: actions/checkout@v5

.github/workflows/stale.yaml

@@ -9,6 +9,10 @@ on:
 
 jobs:
   stale:
+    permissions:
+      contents: read
+      issues: write
+      pull-requests: write
     runs-on: depot-ubuntu-24.04-arm
     steps:
       - uses: actions/stale@v9

.github/workflows/website.yml

@@ -1,4 +1,6 @@
 name: Deploy data to website
+permissions:
+  contents: read
 
 on:
   release: