Add explicit read-only permissions to GitHub Actions workflows

[Copilot]

Add permissions: contents: read to workflow files to follow the principle of least privilege for GitHub Actions security.

Changes

• .github/workflows/nodejs.yml: Added explicit read-only contents permission
• .github/workflows/publish.yml: Added explicit read-only contents permission

This restricts workflows to read-only access unless additional permissions are explicitly granted, reducing the attack surface if workflow tokens are compromised.

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.