feat(.github/workflows): stricter GitHub token default permission compliance

[darccio]

What does this PR do?

Modifies GitHub Actions' workflows to set the most restrictive permissions required.

Reviewer's Checklist

• Changed code has unit tests for its functionality at or near 100% coverage.
• System-Tests covering this feature have been added and enabled with the va.b.c-dev version tag.
• There is a benchmark for any new code, or changes to existing code.
• If this interacts with the agent in a new way, a system test has been added.
• Add an appropriate team label so this PR gets put in the right place for the release notes.
• Non-trivial go.mod changes, e.g. adding new modules, are reviewed by @DataDog/dd-trace-go-guild.

Unsure? Have a question? Request a review!

[pr-commenter]

Benchmarks

Benchmark execution time: 2024-09-10 07:47:05

Comparing candidate commit ac793cf in PR branch dario.castane/VULN-8316/insecure-default-workflow-permissions with baseline commit c29e8fa in branch main.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 59 metrics, 0 unstable metrics.