feat(.github/workflows): stricter GitHub token default permission compliance #2940

Job	Run time
Prepare Go modules cache	4s
Smoke Tests	0s
macos-latest (AppSec disabled)	1m 41s
windows-latest (AppSec disabled)	2m 57s
linux/amd64 golang:1.22-bookworm	1m 16s
ubuntu-latest-16-cores (AppSec disabled)	1m 16s
linux/arm64 golang:1.22-bookworm	2m 53s
linux/amd64 golang:1.22-bullseye	1m 16s
macos-12 go1.22	3m 49s
linux/arm64 golang:1.22-bullseye	2m 57s
macos-12 go1.21	3m 54s
linux/amd64 golang:1.22-alpine	1m 11s
macos-14 go1.22	3m 30s
linux/arm64 golang:1.22-alpine	2m 47s
macos-14 go1.21	3m 14s
linux/amd64 golang:1.21-bookworm	1m 19s
linux/arm64 golang:1.21-bookworm	2m 48s
linux/amd64 golang:1.21-bullseye	1m 31s
linux/arm64 golang:1.21-bullseye	2m 46s
linux/amd64 golang:1.21-alpine	1m 17s
linux/arm64 golang:1.21-alpine	2m 32s
	44m 58s

Provide feedback