chore: address action issues

.github/workflows/cmd-deploy.yml

@@ -5,6 +5,10 @@ on:
   repository_dispatch:
     types: [deploy-command]
 
+permissions:
+  contents: read
+  actions: read
+
 jobs:
   deploy:
     uses: SparkUniverse/workflows/.github/workflows/deploy-command.yaml@main

.github/workflows/slash-cmds.yml

@@ -4,6 +4,8 @@ on:
   issue_comment:
     types: [created]
 
+permissions: {}
+
 jobs:
   dispatch-command:
     if: ${{ github.event.sender.type == 'User' && contains(fromJSON('["OWNER", "MEMBER"]'), github.event.comment.author_association) }}