Potential fix for code scanning alert no. 1: Workflow does not contain permissions

[karastoyanov]

Potential fix for https://github.com/Skill-Forge-Project/skill_forge_backend/security/code-scanning/1

To fix this issue, explicitly set the permissions block to only the minimum required for the workflow to function. Since all steps only need to check out code and run tests, only contents: read is needed. The best place to add this is at the workflow root (top-level), directly underneath the workflow name: before on:. This ensures all jobs inherit the minimal token privileges. No changes outside this block are needed. No additional imports or code are required.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[Copilot]

Pull Request Overview

This PR addresses a security code scanning alert by adding explicit permissions to the Django Tests GitHub workflow to follow the principle of least privilege.

Key Changes

• Adds a permissions block to restrict the workflow to only contents: read access
• Implements security best practice by explicitly limiting token permissions

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}