fix: smoke-test read permission

[mrjoelkamp]

Summary

• adds contents: read permission to smoke-test job to access private repositories
• cleans up permissions with consistent formatting

fixes https://github.com/theupdateframework/tuf-on-ci-template/issues/24