Updated workflow permissions

Added `contents: read` and `pull-requests: write` permissions.

Author: NonSwag

.github/workflows/build.yml

@@ -2,6 +2,9 @@ name: Build
 on: [ pull_request, push ]
 jobs:
   build:
+    permissions:
+      contents: read
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - name: Checkout sources

.github/workflows/hangar-publish.yml

@@ -4,6 +4,9 @@ on:
     types: [ prereleased, released ]
 jobs:
   build:
+    permissions:
+      contents: read
+      pull-requests: write
     env:
       REPOSITORY_USER: ${{ secrets.REPOSITORY_USER }}
       REPOSITORY_TOKEN: ${{ secrets.REPOSITORY_TOKEN }}