Workflow: Enable monitoring of Actions workflow permissions

I would like to understand exactly what permissions each of our GitHub
workflows needs.  So, enable GitHub Security Labs' Actions permissions
monitor.  I'll let it run once, so that the information can be gathered.

I'm not instrumenting the pull workflow, since it's similar to the main
workflow.

Expect future commits to revert this commit (once the necessary
information is gathered), and to apply reduced permissions (based on the
results of this extended workflow).

Author: akkornel

.github/workflows/codeql.yml

@@ -20,6 +20,8 @@ jobs:
       security-events: write
 
     steps:
+    - uses: GitHubSecurityLab/actions-permissions/monitor@56b81d5792a64ef3925978f6c0695ddc41685c27
+
     - name: Checkout repository
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
 
@@ -37,6 +39,8 @@ jobs:
       security-events: write
 
     steps:
+    - uses: GitHubSecurityLab/actions-permissions/monitor@56b81d5792a64ef3925978f6c0695ddc41685c27
+
     - name: Checkout repository
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
 

.github/workflows/common.yml

@@ -16,6 +16,8 @@ jobs:
           - "3.14"
 
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@56b81d5792a64ef3925978f6c0695ddc41685c27
+
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
 
       - name: Set up Python ${{ matrix.python }}

.github/workflows/main.yml

@@ -17,6 +17,8 @@ jobs:
       id-token: write
 
     steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@56b81d5792a64ef3925978f6c0695ddc41685c27
+
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
 
       - name: Set up Python