github actions: Set token permissions to read-only

[adamncasey]

The ossf scorecard highlighted that our actions run with write permissions. This is unnecessary for our CI which should be entirely read only.