Explicitly declare permissions on GH Action workflows that lacked them (#4340)

Author: tcdowney

.github/workflows/bump_bbs_protos.yml

@@ -8,7 +8,9 @@ on:
 jobs:
   update-protos:
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: hmarr/debug-action@v3
       - name: Checkout ccng

.github/workflows/deploy_v3_docs.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   dummy:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Dummy Step
         run: echo "This is a dummy action to ensure visibility"