chore(ci): pin cicd-workflows reusable workflows to commit SHA

[AlexanderLanin]

This PR is part of a large-scale CI refactoring across all S-CORE repositories.

See the tracking issue:
eclipse-score/cicd-workflows#75

It updates reusable workflow references from eclipse-score/cicd-workflows
to the pinned commit SHA (tagged as v0.0.0):

c1c90b1a82a1fab0fc202979dde6686b2162d5a8 # v0.0.0

Only the @ref part of workflow calls is changed, for workflows under:

eclipse-score/cicd-workflows/.github/workflows/*

Pinning reusable workflows to a commit SHA ensures stable and reproducible CI
behavior instead of relying on a moving branch reference.

Part of eclipse-score/cicd-workflows#75

To fix the problem, explicitly declare a permissions: block that grants the minimal required access for this workflow. Since this workflow only triggers copyright checks using a reusable workflow and there is no evidence it needs to write to the repository, a safe minimal default is read‑only repository contents. This is typically expressed as permissions: contents: read at the workflow root so it applies to all jobs, including the copyright-check job that reuses another workflow.

Concretely, in .github/workflows/copyright.yml, add a permissions: section after the name: (or before jobs:) and set contents: read. This will ensure that, unless the reusable workflow further expands permissions, the GITHUB_TOKEN used by this workflow is restricted to reading repository contents only. No additional imports or external dependencies are needed; this is purely a YAML configuration change within the workflow file and does not alter existing functionality of the copyright checks.

[github-actions]

The created documentation from the pull request is available at: docu-html

[4og]

Merged in a3c843c