ci(workflows): Restrict Permissions

[jshlbrd]

Description

• Closes https://github.com/brexhq/substation/security/code-scanning/25
• Closes https://github.com/brexhq/substation/security/code-scanning/26
• Closes https://github.com/brexhq/substation/security/code-scanning/27

Motivation and Context

Seems a bit obvious, we want to improve the security of the repo. 😆

How Has This Been Tested?

N/A (need to confirm after merging to main).

Types of changes

• [ ] Bug fix (non-breaking change which fixes an issue)
• [ ] New feature (non-breaking change which adds functionality)
• [ ] Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

• [x] My code follows the code style of this project.
• [ ] My change requires a change to the documentation.
• [ ] I have updated the documentation accordingly.