feat(ci): sync ci security checks

[sonupreetam]

Summary

Replicate the ci_security.yml from org_infra to resolve workflow failures

Updates

• Add missing workflow permissions (packages: none, id-token: write, packages: write) to ci_security.yml to align with upstream org-infra reusable workflow requirements.
• id-token: write is required for OIDC token generation in the trivy_image job.
• packages: write is required for reusable workflow validation in the trivy_image job.

Review Hints

• Verify CI security workflow runs successfully with the updated permissions.
• Confirm no permission errors in the call_reusable_vuln_scan job.

[marcusburghardt]

LGTM