chore(GH Acts WF): restrict permissions

Author: bjthres1

.github/workflows/python-package.yml

@@ -2,6 +2,9 @@
 # For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-python
 
 name: Python package
+permissions:
+  contents: read
+  pull-requests: read
 
 on:
   push: