ci: add explicit perms and don't globally install corepack

Author: danielroe

.github/workflows/autofix.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@v6
-      - run: npm i -g --force corepack && corepack enable
+      - run: corepack enable
       - uses: actions/setup-node@v6
         with:
           node-version: lts/*

.github/workflows/ci.yml

@@ -8,13 +8,16 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     runs-on: ubuntu-latest
 
     steps:
       - uses: actions/checkout@v6
-      - run: npm i -g --force corepack && corepack enable
+      - run: corepack enable
       - uses: actions/setup-node@v6
         with:
           node-version: lts/*
@@ -31,7 +34,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@v6
-      - run: npm i -g --force corepack && corepack enable
+      - run: corepack enable
       - uses: actions/setup-node@v6
         with:
           node-version: lts/*
@@ -59,7 +62,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@v6
-      - run: npm i -g --force corepack && corepack enable
+      - run: corepack enable
       - uses: actions/setup-node@v6
         with:
           node-version: lts/*