Update pins and permissions for GHA reusable workflows

Author: robomics

.github/workflows/codecov.yml

@@ -54,7 +54,10 @@ jobs:
 
   build-conan-deps:
     name: Build Conan deps
-    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@ededff07255164aa8b21887fd638781a885f8462
+    permissions:
+      actions: write
+      contents: read
+    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@1e750a1ba3f24e25059bff8de5c4eb62b9686770
 
   build-project:
     name: Build project

.github/workflows/codeql-cpp.yml

@@ -29,7 +29,10 @@ permissions:
 jobs:
   build-conan-deps:
     name: Build Conan deps
-    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@ededff07255164aa8b21887fd638781a885f8462
+    permissions:
+      actions: write
+      contents: read
+    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@1e750a1ba3f24e25059bff8de5c4eb62b9686770
 
   analyze:
     name: Analyze (C++)

.github/workflows/cppstd.yml

@@ -32,14 +32,20 @@ permissions:
 jobs:
   build-conan-deps-cpp20:
     name: Build Conan deps
-    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@ededff07255164aa8b21887fd638781a885f8462
+    permissions:
+      actions: write
+      contents: read
+    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@1e750a1ba3f24e25059bff8de5c4eb62b9686770
     with:
       image: ghcr.io/paulsengroup/ci-docker-images/ubuntu-24.04-cxx-clang-19
       cppstd: 20
 
   build-conan-deps-cpp23:
     name: Build Conan deps
-    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@ededff07255164aa8b21887fd638781a885f8462
+    permissions:
+      actions: write
+      contents: read
+    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@1e750a1ba3f24e25059bff8de5c4eb62b9686770
     with:
       image: ghcr.io/paulsengroup/ci-docker-images/ubuntu-24.04-cxx-clang-19
       cppstd: 23

.github/workflows/fuzzy-testing.yml

@@ -60,7 +60,10 @@ permissions:
 jobs:
   build-conan-deps:
     name: Build Conan deps
-    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@ededff07255164aa8b21887fd638781a885f8462
+    permissions:
+      actions: write
+      contents: read
+    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@1e750a1ba3f24e25059bff8de5c4eb62b9686770
 
   build-project:
     name: Build project

.github/workflows/macos-ci.yml

@@ -85,13 +85,19 @@ jobs:
 
   build-conan-deps-x86:
     name: Build Conan deps
-    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-macos.yml@ededff07255164aa8b21887fd638781a885f8462
+    permissions:
+      actions: write
+      contents: read
+    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-macos.yml@1e750a1ba3f24e25059bff8de5c4eb62b9686770
     with:
       os: macos-13
 
   build-conan-deps-arm64:
     name: Build Conan deps
-    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-macos.yml@ededff07255164aa8b21887fd638781a885f8462
+    permissions:
+      actions: write
+      contents: read
+    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-macos.yml@1e750a1ba3f24e25059bff8de5c4eb62b9686770
     with:
       os: macos-14
 

.github/workflows/packaging.yml

@@ -30,7 +30,10 @@ permissions:
 jobs:
   build-conan-deps:
     name: Build Conan deps
-    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@ededff07255164aa8b21887fd638781a885f8462
+    permissions:
+      actions: write
+      contents: read
+    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@1e750a1ba3f24e25059bff8de5c4eb62b9686770
 
   test-find-package:
     runs-on: ubuntu-latest

.github/workflows/run-clang-tidy.yml

@@ -44,7 +44,10 @@ permissions:
 jobs:
   build-conan-deps:
     name: Build Conan deps
-    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@ededff07255164aa8b21887fd638781a885f8462
+    permissions:
+      actions: write
+      contents: read
+    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@1e750a1ba3f24e25059bff8de5c4eb62b9686770
 
   build-project:
     name: Build project

.github/workflows/ubuntu-ci.yml

@@ -155,7 +155,10 @@ jobs:
 
   build-conan-deps:
     name: Build Conan deps
-    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@ededff07255164aa8b21887fd638781a885f8462
+    permissions:
+      actions: write
+      contents: read
+    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-linux.yml@1e750a1ba3f24e25059bff8de5c4eb62b9686770
 
   build-project:
     name: Build project

.github/workflows/windows-ci.yml

@@ -76,7 +76,10 @@ jobs:
 
   build-conan-deps:
     name: Build Conan deps
-    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-windows.yml@ededff07255164aa8b21887fd638781a885f8462
+    permissions:
+      actions: write
+      contents: read
+    uses: paulsengroup/hictk/.github/workflows/build-conan-deps-windows.yml@1e750a1ba3f24e25059bff8de5c4eb62b9686770
     with:
       os: windows-2019