ci: add token permissions

[bigcat88]

This PR should remove the Medium security complaints:

In publish_package.yml

permissions:
  contents: read

should be ok, as the next lines are still present for publishing at the job level that has higher priority then global one:

permissions:
      id-token: write  # IMPORTANT: this permission is mandatory for trusted 

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

@@           Coverage Diff           @@
##             main     #305   +/-   ##
=======================================
  Coverage        ?   47.91%           
=======================================
  Files           ?       30           
  Lines           ?     3068           
  Branches        ?        0           
=======================================
  Hits            ?     1470           
  Misses          ?     1598           
  Partials        ?        0           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.