chore: add workflow permissions block for codeql and use consistent workflow list style

Author: Lstedmanfalls

.github/workflows/lint-and-test-infra.yaml

@@ -2,8 +2,13 @@ name: Lint and Test Infrastructure Setup
 
 on: 
   pull_request:
-    branches: [main]
-    types: [opened, synchronize, reopened]
+    types: 
+      - opened
+      - synchronize
+      - reopened
+
+permissions:
+  contents: read
 
 jobs:
   lint-and-test-infra-code:

.github/workflows/lint-and-test-scripts.yaml

@@ -2,8 +2,13 @@ name: Lint and Test Setup Scripts
 
 on: 
   pull_request:
-    branches: [main]
-    types: [opened, synchronize, reopened]
+    types: 
+      - opened
+      - synchronize
+      - reopened
+
+permissions:
+  contents: read
 
 jobs:
   lint-and-test-setup-scripts: