fix(ci): add missing workflow permissions to resolve security alerts (#646)

Co-authored-by: Claude <noreply@anthropic.com>

.github/workflows/semantic-pull-request.yaml

@@ -11,6 +11,9 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event.number }}
   cancel-in-progress: true
 
+permissions:
+  pull-requests: read
+
 jobs:
   main:
     name: Check Pull Request Title