feat(.github/workflows): stricter GitHub token default permission compliance #2945

Job	Run time
Prepare Go modules cache	7s
Smoke Tests	0s
macos-latest (AppSec disabled)	2m 1s
linux/amd64 golang:1.22-bookworm	1m 16s
windows-latest (AppSec disabled)	2m 43s
linux/arm64 golang:1.22-bookworm	2m 55s
ubuntu-latest-16-cores (AppSec disabled)	1m 13s
macos-12 go1.22	6m 38s
linux/amd64 golang:1.22-bullseye	1m 27s
linux/arm64 golang:1.22-bullseye	2m 40s
macos-12 go1.21	5m 48s
linux/amd64 golang:1.22-alpine	1m 12s
macos-14 go1.22	2m 52s
linux/arm64 golang:1.22-alpine	2m 51s
macos-14 go1.21	3m 55s
linux/amd64 golang:1.21-bookworm	1m 30s
linux/arm64 golang:1.21-bookworm	2m 59s
linux/amd64 golang:1.21-bullseye	1m 22s
linux/arm64 golang:1.21-bullseye	2m 42s
linux/amd64 golang:1.21-alpine	1m 21s
linux/arm64 golang:1.21-alpine	2m 45s
	50m 17s

Provide feedback