Add explicit top-level `permissions: contents: read` to the upgrade-fluxcd-pkg workflow to follow the principle of least privilege and fix the OpenSSF Scorecard Token-Permissions warning. Signed-off-by: Gagan H R <hrgagan4@gmail.com>
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>