[18.0-fr7] Restrict golangci-lint workflow token permissions

[abays]

Summary

Set contents: read as the workflow-level default for the golangci-lint workflow. Both jobs inherit read-only token permissions.

Validation

No tests were run; this change only adjusts workflow token permissions.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: bbe6c115-7197-49fd-8ea6-fa1615f0be47

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

_{Comment @coderabbitai help to get the list of available commands.}

[stuggi]

/lgtm