Add permissions to pr-checks workflow

[jsoref]

Without this, I get: https://github.com/check-spelling-sandbox/github-codeql-action/actions/runs/11429827970/job/31796641932

Run github/codeql-action/upload-sarif@v3
Warning: Resource not accessible by integration
Uploading results
  Processing sarif files: ["eslint.sarif"]
  Validating eslint.sarif
  Combining SARIF files using the CodeQL CLI
  Adding fingerprints to SARIF file. See https://docs.github.com/en/enterprise-cloud@latest/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning#providing-data-to-track-code-scanning-alerts-across-runs for more information.
  Uploading results
  Warning: Resource not accessible by integration
  Error: Resource not accessible by integration
  Warning: Resource not accessible by integration

Merge / deployment checklist

• Confirm this change is backwards compatible with existing workflows.
• Confirm the readme has been updated if necessary.
• Confirm the changelog has been updated if necessary.

[NlightNFotis]

LGTM. Would like someone else to have a look at this before we merge this.

[henrymercer]

LGTM, thank you for the fix!