fix: fix perms for validate pr title and ossf scorecard

[Lstedmanfalls]

What is the Feature / Change Being Made?

In the last merge to main, the ossf scorecard run said it was missing contents: read perms. Also the semver release failed, I think because it was using the github token from the workflow itself. Trying again.

What is the Rationale in Relation to Best Practices?

Fixing the workflow.

How Has This Been Tested?

Can only test semver on merge :(

How Can the Community Use This?

If it works, people can use it once the version is released successfully.

Links to Related Issues or Discussions

https://github.com/mindbuttergold/github-actions-reusable-workflows/actions/runs/16923978915

https://github.com/mindbuttergold/github-actions-reusable-workflows/actions/runs/16923978901

Contribution Reminders

Your PR needs:

• At least 5 thumbs up from members of the community to be approved / merged
• Final review / approval from at least one maintainer
• Clear, complete, and fully usable code for real-world systems
• No placeholder, unfinished, or copied code with incompatible licensing
• No redundant comments or unrelated artifacts
• The PR title to follow conventional commit standards

Refer the CONTRIBUTING guidelines and CODE_OF_CONDUCT for more information.

[github-actions]

🎉 This PR is included in version 1.0.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀