scorecard.yaml fails due to incorrect permissions out of the box

Enabling Scorecard using the `bloomberg/.github` template from this repo fails out of the box.

https://github.com/bloomberg/blazingmq-sdk-java/pull/115 added scorecard.yaml from template

> Error calling workflow '.../_scorecard.yml@main'. The nested job 'scorecard' is requesting 'checks: read, contents: read, issues: read, pull-requests: read', but is only allowed 'checks: none, contents: none, issues: none, pull-requests: none'.

https://github.com/bloomberg/blazingmq-sdk-java/pull/116 added `read` permissions for checks/contents/issues/pull-requests and that works, we're now on scorecard: https://scorecard.dev/viewer/?uri=github.com/bloomberg/blazingmq-sdk-java

Looks like we just need to add those permissions to the template

Locate the scorecard.yaml workflow in the bloomberg/.github template and compare its permissions with the working change described in blazingmq-sdk-java pull request 116. Verify the template-generated workflow can run Scorecard without the nested-job permission error and that the required read permissions are present.

Written by the indexing model from the issue text.