Potential fix for code scanning alert no. 23: Workflow does not contain permissions

[sydneyrenee]

Potential fix for https://github.com/SolaceHarmony/emberharmony/security/code-scanning/23

Add an explicit permissions block at the workflow root so all jobs (including zed) inherit least-privilege defaults. For this workflow, the best non-breaking baseline is:

• contents: read

This supports checkout/read operations while preventing unnecessary write scopes for GITHUB_TOKEN. Since the workflow appears to use PAT secrets for external/write actions, restricting GITHUB_TOKEN should not change intended functionality.

Change needed:

• File: .github/workflows/sync-zed-extension.yml
• Region: after the on: triggers block and before jobs:
• No imports, methods, or extra definitions are needed (YAML config only).

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[gemini-code-assist]

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.