Potential fix for code scanning alert no. 1: Workflow does not contain permissions

[adhami3310]

Potential fix for https://github.com/reflex-dev/reflex-monaco/security/code-scanning/1

In general, the fix is to explicitly declare minimal GITHUB_TOKEN permissions for the workflow or for the specific job. For a linting/pre-commit job that only checks out code and runs local tools, contents: read is typically sufficient. This both silences the CodeQL warning and ensures the job cannot perform unintended write operations via the token, even if other configuration defaults are permissive.

The best targeted fix here is to add a permissions: block at the workflow root level (top-level, alongside name and on). That will apply to all jobs that do not override permissions, including the pre-commit job, and will not change any existing functionality since no write operations are performed. Concretely, in .github/workflows/pre-commit.yml, insert:

permissions:
  contents: read

between the name: pre-commit line and the on: block. No imports or additional methods are needed because this is pure workflow configuration.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.