🔧 ci(github-actions): adjust publish workflow permissions

- modify pull-request permission from write to read
- align permissions configuration with minimal required access

.github/workflows/publish-to-pypi.yml

@@ -9,7 +9,7 @@ on:
 permissions:
   id-token: write
   contents: write
-  pull-requests: write
+  pull-requests: read
 
 jobs:
   build: