Harden CI

[medmunds]

Improve CI workflow security

[Copilot]

Copilot reviewed 1 out of 1 changed files in this pull request and generated no comments.

Comments suppressed due to low confidence (2)

.github/workflows/ci.yml:9

• Setting global permissions to an empty object disables all automatic permissions; ensure that every job explicitly defines all required permissions to avoid unintentional behavior.

permissions: {}

.github/workflows/ci.yml:195

• Verify that the conditional expression for the 'Cache Unicode data' step is correctly closed with matching parentheses and curly braces to ensure the condition works as intended.

          github.event_name == 'push' && github.ref == 'refs/heads/main' &&