ci: audit workflows with zizmor

.github/workflows/node-docs.yml

@@ -10,6 +10,8 @@ on:
     branches:
       - main
 
+permissions: {}
+
 jobs:
   generate:
     runs-on: ubuntu-latest
@@ -17,6 +19,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           show-progress: false
+          persist-credentials: false
 
       - name: Use Node.js 18.x
         uses: actions/setup-node@v4