INTPYTHON-615 Fix permissions to match called workflows

Author: blink1073

.github/workflows/release-python.yml

@@ -60,13 +60,17 @@ jobs:
     uses: ./.github/workflows/dist.yml
     permissions:
       contents: read
+      actions: read
     with:
       ref: ${{ needs.pre-publish.outputs.version }}
 
   static-scan:
     needs: [pre-publish]
     uses: ./.github/workflows/codeql.yml
     permissions:
+      security-events: write
+      packages: read
+      actions: read
       contents: read
     with:
       ref: ${{ needs.pre-publish.outputs.version }}