ci: move workflow permissions to job level (SonarCloud)

Author: peter-matkovski

.github/workflows/sdk-size-updates.yml

@@ -12,8 +12,9 @@ concurrency:
   cancel-in-progress: true
 jobs:
   update-sdk-sizes:
-    uses: GetStream/stream-build-conventions-android/.github/workflows/sdk-size-updates.yml@8c5fbade4ee9c06a0a979bcb0866e64669254f73
     permissions:
+      contents: read
+    uses: GetStream/stream-build-conventions-android/.github/workflows/sdk-size-updates.yml@8c5fbade4ee9c06a0a979bcb0866e64669254f73
       pull-requests: write
     with:
       modules: "stream-chat-android-client stream-chat-android-ui-components stream-chat-android-compose"