ci: scope down GitHub Token permissions

[AdnaneKhan]

Issue #, if available:

Description of changes:

Scope down GitHub Token to least necessary.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.73%. Comparing base (a66f87a) to head (f26cddc).
⚠️ Report is 161 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #344   +/-   ##
=======================================
  Coverage   70.73%   70.73%           
=======================================
  Files          17       17           
  Lines        1753     1753           
=======================================
  Hits         1240     1240           
  Misses        427      427           
  Partials       86       86           

see 3 files with indirect coverage changes

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 57f4231...f26cddc. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.