Add explicit permissions

Author: zoewangg

.github/workflows/api-surface-area-review-verification.yml

@@ -1,5 +1,9 @@
 name: API Surface Area Review Verification
 
+permissions:
+  contents: read
+  pull-requests: read
+
 on:
   pull_request:
     types: [ opened, synchronize, reopened, labeled, unlabeled ]

.github/workflows/changelog-verification.yml

@@ -1,5 +1,9 @@
 name: Changelog verification
 
+permissions:
+  contents: read
+  pull-requests: read
+
 on:
   pull_request:
     types: [ opened, synchronize, reopened, labeled, unlabeled ]
@@ -12,7 +16,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - name: Check for changelog entry
-        if: ${{ !contains(github.event.pull_request.labels.*.name, 'no-changelog') }}
+        if: ${{ !contains(github.event.pull_request.labels.*.name, 'changelog-not-required') }}
         run: |
           git fetch origin ${{ github.base_ref }} --depth 1 && \
           git diff remotes/origin/${{ github.base_ref }} --name-only | grep -P "\.changes/next-release/*[a-zA-Z0-9_-]+\.json"