[improve](sec): limit top level access (#608)

Signed-off-by: Ralph Hightower <32745442+RalphHightower@users.noreply.github.com>

.github/workflows/release-please.yml

@@ -4,6 +4,22 @@ on:
     branches:
       - main
 
+permissions:
+  actions: none
+  attestations: none
+  checks: none
+  contents: none
+  deployments: none
+  id-token: none
+  issues: none
+  discussions: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+  statuses: none
+
 jobs:
   release-please:
     runs-on: ubuntu-latest