Add read-only top-level permissions to cifuzz.yml Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>