Add least-privilege permissions to sample-test workflow (CodeQL: limit GITHUB_TOKEN)

Author: AakashHotchandani

.github/workflows/sdk-sample-test.yml

@@ -12,6 +12,10 @@ on:
         description: 'The full commit id to build'
         required: true
 
+permissions:
+  contents: read       # checkout
+  checks: write        # github-script creates the status check
+
 jobs:
   sdk-sample:
     runs-on: ${{ matrix.os }}