Limit permissions to `contents: read`

[jamacku]

Limiting permissions to a minimum required value is a good practice to avoid unintended actions on your repository.