[ci] chore: add permissions to workflows for content access

[JoyboyBrian]

What

Why

Type of Change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Refactor (code change that neither fixes a bug nor adds a feature)
• Documentation update
• CI/build configuration change

How to Test

Checklist

• PR title follows [module] type: description format
• Appropriate labels added (e.g. enhancement, bug, breaking)
• ruff check . and ruff format --check . pass
• pyright osmosis_ai/ passes
• pytest passes (new tests added if applicable)
• Public API changes are documented
• No secrets or credentials included

---

Summary by cubic

Add explicit contents: read permission to the check-pr-title and tests workflows so they can read repository files with the default GITHUB_TOKEN. This follows least-privilege defaults and prevents failures from missing content access.

^{Written for commit d03da94. Summary will update on new commits.}

[cubic-dev-ai]

No issues found across 2 files