ci: audit workflows with zizmor

.github/workflows/node-tests.yml

@@ -15,6 +15,8 @@ on:
     branches:
       - main
 
+permissions: {}
+
 jobs:
   tests:
     name: Tests
@@ -26,6 +28,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           show-progress: false
+          persist-credentials: false
       - uses: actions/setup-node@v4
         with:
           node-version: "18"