chore(ci): update permissions

[sthulb]

Issue #, if available: #1763

Description of changes:

Adds root level permissions and refines permissions in workflows

Checklist

• Meet tenets criteria
• Update tests
• Update docs
• PR title follows conventional commit semantics

Breaking change checklist

RFC issue #:

• Migration process documented
• Implement warnings (if it can live side by side)

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

💾 Artifacts Size Report

Module	Version	Size (KB)
powertools-core	1.19.0-SNAPSHOT	9.88
powertools-serialization	1.19.0-SNAPSHOT	17.86
powertools-logging	1.19.0-SNAPSHOT	45.77
powertools-tracing	1.19.0-SNAPSHOT	13.39
powertools-sqs	1.19.0-SNAPSHOT	28.95
powertools-metrics	1.19.0-SNAPSHOT	14.23
powertools-parameters	1.19.0-SNAPSHOT	41.07
powertools-validation	1.19.0-SNAPSHOT	18.84
powertools-cloudformation	1.19.0-SNAPSHOT	16.76
powertools-idempotency	1.19.0-SNAPSHOT	43.50
powertools-large-messages	1.19.0-SNAPSHOT	17.59
powertools-batch	1.19.0-SNAPSHOT	16.82