fix: update permissions to ensure contents are readable

Author: vlamas

.github/workflows/js.yml

@@ -10,6 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       id-token: write  # Required for OIDC trusted publishing
+      contents: read
 
     steps:
     - name: Checkout code