Avoid read-all permissions in dart.yml CI action (#2713)

Resolves a zizmor warning.

.github/workflows/dart.yml

diff --git a/.github/workflows/dart.yml b/.github/workflows/dart.yml
index 56268ed..180e453 100644
--- a/.github/workflows/dart.yml
+++ b/.github/workflows/dart.yml
@@ -1,4 +1,4 @@
-# Created with package:mono_repo v6.7.1
+# Created with package:mono_repo v6.7.2
 name: Dart CI
 on:
   push:
@@ -13,7 +13,8 @@
     shell: bash
 env:
   PUB_ENVIRONMENT: bot.github
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   job_001:
@@ -38,7 +39,7 @@
         with:
           persist-credentials: false
       - name: mono_repo self validate
-        run: dart pub global activate mono_repo 6.7.1
+        run: dart pub global activate mono_repo 6.7.2
       - name: mono_repo self validate
         run: dart pub global run mono_repo generate --validate
   job_002:

mono_repo.yaml

diff --git a/mono_repo.yaml b/mono_repo.yaml
index 1131355..acc6fc9 100644
--- a/mono_repo.yaml
+++ b/mono_repo.yaml
@@ -2,6 +2,8 @@
 self_validate: analyze_and_format
 
 github:
+  permissions:
+    contents: read
   # Setting just `cron` keeps the defaults for `push` and `pull_request`
   cron: '0 0 * * 0' # “At 00:00 (UTC) on Sunday.”
   on_completion:

tool/ci.sh

diff --git a/tool/ci.sh b/tool/ci.sh
index 582355b..65b4cae 100755
--- a/tool/ci.sh
+++ b/tool/ci.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-# Created with package:mono_repo v6.7.1
+# Created with package:mono_repo v6.7.2
 
 # Support built in commands on windows out of the box.