Potential fix for code scanning alert no. 4: Workflow does not contain permissions

[hoyon]

Potential fix for https://github.com/Multiverse-io/images/security/code-scanning/4

To fix the problem, you should add a permissions block to the workflow file, either at the root level (to apply to all jobs) or at the job level (to apply only to the docker job). The minimal permissions required for pushing images to the GitHub Container Registry are typically contents: read and packages: write. Adding this block ensures the workflow adheres to the principle of least privilege and prevents the workflow from inheriting overly broad permissions. The change should be made at the top level of the workflow file, immediately after the name: declaration and before the on: block, or inside the docker job definition.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.