Github Actions: set top level permissions

[psilva-veeam]

There's the recommendation to set top level permission e.g. by setting contents: read and settings needed write permissions (already there) at the job level