fix: add pull request permission

.github/workflows/main.yaml

@@ -10,6 +10,8 @@ jobs:
   ci:
     name: CI
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: read
     outputs:
       src_changed: ${{ steps.src_changed.outputs.changes }}
     steps:
@@ -93,7 +95,7 @@ jobs:
       - name: dotnet nuget add source
         shell: bash
         run: dotnet nuget add source --username USERNAME --password ${{ secrets.GITHUB_TOKEN }} --store-password-in-clear-text --name github "https://nuget.pkg.github.com/emberstack/index.json"
-        
+
       - name: dotnet nuget push
         run: |
           for pkg in .artifacts/nuget/*.nupkg; do