Fix SonarCloud vulnerabilities

[ewastempel]

User Story

New HIGH token-permissions vulnerability was introduced about 3 weeks ago affecting three different workflows,
see the list here: https://github.com/ministryofjustice/modernisation-platform/security/code-scanning.

score is 0: jobLevel 'contents' permission set to 'write'
Remediation tip: Verify which permissions are needed and consider whether you can reduce them.
Click Remediation section below for further remediation help

Fix the issue by narrowing down permissions to only the ones that are needed (see remediation help)

Value

Reducing security risk.

Definition of done

• readme has been updated
• user docs have been updated
• another team member has reviewed
• tests are green

Reference

How to write good user stories