chore(repo): specify missing workflow permissions in CICD

[lukeroantreeONS]

📌 specify missing workflow permissions in ci.yml

✨ Summary

Code Scanning alerted that workflow permissions are not explicitly set in our CICD pipeline, so they default to the permissions of the repo owners which is overly permissive.

This PR limits them to 'write', which is needed for the conventional commits task.

📜 Changes Introduced

• chore(repo): limit CI.yml workflow permissions to 'write'

✅ Checklist

Please confirm you've completed these checks before requesting a review.

• Code passes linting with Ruff
• Security checks pass using Bandit
• API and Unit tests are written and pass using pytest
• Terraform files (if applicable) follow best practices and have been validated (terraform fmt & terraform validate)
• DocStrings follow Google-style and are added as per Pylint recommendations
• Documentation has been updated if needed

🔍 How to Test

Check the Lint & Test workflow output that runs on opening this PR