chore(security): add permissions to test action (#15)

#### What this PR does / why we need it


https://github.com/open-component-model/ocm-setup-action/security/code-scanning/3

#### Which issue(s) this PR fixes

fixes: open-component-model/ocm-project#372

.github/workflows/main.yaml

@@ -1,4 +1,7 @@
-
+name: main-test
+permissions:
+  contents: read
+  pull-requests: read
 "on": [push]
 
 jobs:

README.md

@@ -31,6 +31,6 @@ jobs:
 
 ## Licensing
 
-Copyright 2024 SAP SE or an SAP affiliate company and Open Component Model contributors.
+Copyright 2025 SAP SE or an SAP affiliate company and Open Component Model contributors.
 Please see our [LICENSE](LICENSE) for copyright and license information.
 Detailed information including third-party components and their licensing/copyright information is available [via the REUSE tool](https://api.reuse.software/info/github.com/open-component-model/ocm-setup-action).

REUSE.toml

@@ -7,5 +7,5 @@ SPDX-PackageComment = "The code in this project may include calls to APIs (\"API
 [[annotations]]
 path = "**"
 precedence = "aggregate"
-SPDX-FileCopyrightText = "2024 SAP SE or an SAP affiliate company and Open Component Model contributors"
+SPDX-FileCopyrightText = "2025 SAP SE or an SAP affiliate company and Open Component Model contributors"
 SPDX-License-Identifier = "Apache-2.0"