Update config

[hugovk]

Changes proposed in this pull request:

• Fix zizmor warning[excessive-permissions]: overly broad permissions
• Remove redundant config: attestations is now default
• More testing with uv

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 99.49%. Comparing base (de8b8a1) to head (f1bdbb6).
Report is 48 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #233      +/-   ##
==========================================
+ Coverage   99.47%   99.49%   +0.01%     
==========================================
  Files          11       11              
  Lines         760      785      +25     
==========================================
+ Hits          756      781      +25     
  Misses          4        4              

Flag	Coverage Δ
macos-latest	96.79% <ø> (-0.23%)	⬇️
ubuntu-latest	96.79% <ø> (-0.23%)	⬇️
windows-latest	94.29% <ø> (-0.67%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.