feat(.github/workflows): stricter GitHub token default permission compliance #2959

Job	Run time
Prepare Go modules cache	10s
Smoke Tests	0s
macos-12 go1.22	5m 25s
macos-12 go1.21	7m 50s
macos-14 go1.22	3m 16s
macos-14 go1.21	3m 19s
macos-latest (AppSec disabled)	1m 43s
windows-latest (AppSec disabled)	2m 49s
ubuntu-latest-16-cores (AppSec disabled)	1m 8s
linux/amd64 golang:1.22-bookworm	1m 28s
linux/arm64 golang:1.22-bookworm	2m 55s
linux/amd64 golang:1.22-bullseye	1m 39s
linux/arm64 golang:1.22-bullseye	3m 16s
linux/amd64 golang:1.22-alpine	1m 18s
linux/arm64 golang:1.22-alpine	2m 44s
linux/amd64 golang:1.21-bookworm	1m 28s
linux/arm64 golang:1.21-bookworm	2m 43s
linux/amd64 golang:1.21-bullseye	1m 27s
linux/arm64 golang:1.21-bullseye	3m 13s
linux/amd64 golang:1.21-alpine	1m 24s
linux/arm64 golang:1.21-alpine	2m 50s
	52m 5s

Provide feedback