🌱 reduce github actions permissions

[tuminoid]

Cleanup GH actions, and move permissions from top-level to job-level. Restrict job running to the main repository.

This restores token permission score to 10/10.

/hold until https://github.com/metal3-io/ip-address-manager/pull/408 is reviewed and merged as this is replication of that.

[tuminoid]

Holding until dependabot in IPAM with new permissions has been tested. It should have some PRs next Monday at latest.

[tuminoid]

/hold Waiting for https://github.com/metal3-io/ironic-image/pull/456 to merge first.

[elfosardo]

/test-centos-integration-main /test-ubuntu-integration-main

[elfosardo]

/approve

[metal3-io-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: elfosardo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/metal3-io/ironic-image/blob/main/OWNERS)~~ [elfosardo] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

[tuminoid]

/unhold Dependency was merged.

[tuminoid]

/override test-centos-integration-main test-ubuntu-integration-main GH actions change, not relevant.

[metal3-io-bot]

@tuminoid: Overrode contexts on behalf of tuminoid: test-centos-integration-main, test-ubuntu-integration-main

In response to [this](https://github.com/metal3-io/ironic-image/pull/471#issuecomment-1891834741): >/override test-centos-integration-main test-ubuntu-integration-main >GH actions change, not relevant. Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.

[tuminoid]

/cc @lentzi90 @Rozzii