fix(ci): add least-privilege permissions to workflow files#2944

Draft

waveywaves wants to merge 2 commits intochainloop-dev:mainfrom

waveywaves:fix/scorecard-token-permissions

Commits on Mar 28, 2026

fix(ci): add least-privilege permissions to workflow files
waveywaves
committed
fix(crafter): use deterministic filename for AI config collector

waveywaves
and
claude
committed