fix(ci): add required permissions for reusable workflows (Bug B)

Add security-events: write and id-token: write to workflow-level
permissions in scorecard.yml for scorecard-reusable.yml calls.
Ensure contents: read at workflow-level for secret-scanner.yml.

Part of hyperpolymath/standards#426 remediation - Batch 2.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>

Author: hyperpolymath

.github/workflows/scorecard.yml

@@ -8,7 +8,10 @@ on:
   push:
     branches: [main]
 
-permissions: read-all
+permissions:
+  contents: read
+  security-events: write
+  id-token: write
 
 jobs:
   analysis: