scorecard.yaml fails due to incorrect permissions out of the box

[chrisbeard]

Enabling Scorecard using the bloomberg/.github template from this repo fails out of the box.

bloomberg/blazingmq-sdk-java#115 added scorecard.yaml from template

Error calling workflow '.../_scorecard.yml@main'. The nested job 'scorecard' is requesting 'checks: read, contents: read, issues: read, pull-requests: read', but is only allowed 'checks: none, contents: none, issues: none, pull-requests: none'.

bloomberg/blazingmq-sdk-java#116 added read permissions for checks/contents/issues/pull-requests and that works, we're now on scorecard: https://scorecard.dev/viewer/?uri=github.com/bloomberg/blazingmq-sdk-java

Looks like we just need to add those permissions to the template