fix for code scanning alert: Workflow does not contain permissions

[ron-tsarevsky]

Potential fix for https://github.com/de-id/ffmpeg-kit/security/code-scanning/37

To fix the problem, we should explicitly declare the permissions: key at the workflow root (so it applies to all jobs, unless overridden), specifying only the minimal access needed for this workflow. At a minimum, CodeQL suggests contents: read, but because the workflow creates releases (softprops/action-gh-release) and uploads artifacts, we likely need additional permissions:

• contents: write (for creating releases/assets)
• actions: write (for uploading artifacts, though upload-artifact does not require this)
• If we do not touch issues or PRs, avoid those permissions.

The best change is to add the following block just after the workflow name and before on: (so it covers all jobs in the workflow):

permissions:
  contents: write

If you want to start with the most restrictive and only escalate if you discover errors, you can use contents: read initially. However, the action-gh-release will require write on contents to create releases. So contents: write is correct for this workflow.

Only the top region of .github/workflows/android-build-scripts-did.yml needs to be changed.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.