fix(ci): add required permissions for reusable workflows (Bug B)

Add security-events: write and id-token: write to workflow-level
permissions in scorecard.yml for scorecard-reusable.yml calls.
Remove unnecessary actions: read from secret-scanner.yml.

Part of hyperpolymath/standards#426 remediation - Batch 2.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>

Author: hyperpolymath

.github/workflows/scorecard.yml

@@ -9,8 +9,9 @@ on:
   workflow_dispatch:
 
 permissions:
-  actions: read
   contents: read
+  security-events: write
+  id-token: write
 
 jobs:
   scorecard:

.github/workflows/secret-scanner.yml

@@ -8,7 +8,6 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 permissions:
-  actions: read
   contents: read
 jobs:
   scan: