How can I give read only permission to someone to only one project?
You need to create a permission scheme with Browse project permission given to a specific role, you can call it "Read only" group. Also in your permission scheme make sure this role doesn't have any edit permission.
Are you on free plan? You need paid plan to create own permission schemes.