feat(.github/workflows): stricter GitHub token default permission compliance #3058

Job	Run time
Prepare Go modules cache	12s
Smoke Tests	0s
macos-latest (AppSec disabled)	2m 0s
macos-12 go1.23	4m 39s
windows-latest (AppSec disabled)	2m 44s
linux/amd64 golang:1.23-bookworm	1m 23s
macos-12 go1.22	8m 5s
ubuntu-latest-16-cores (AppSec disabled)	1m 21s
linux/arm64 golang:1.23-bookworm	2m 58s
macos-14 go1.23	2m 52s
linux/amd64 golang:1.23-bullseye	1m 31s
macos-14 go1.22	4m 2s
linux/arm64 golang:1.23-bullseye	2m 57s
linux/amd64 golang:1.23-alpine	1m 16s
linux/arm64 golang:1.23-alpine	3m 4s
linux/amd64 golang:1.22-bookworm	1m 20s
linux/arm64 golang:1.22-bookworm	3m 14s
linux/amd64 golang:1.22-bullseye	1m 24s
linux/arm64 golang:1.22-bullseye	3m 21s
linux/amd64 golang:1.22-alpine	1m 17s
linux/arm64 golang:1.22-alpine	3m 9s
	52m 49s

Provide feedback