ops: add permissions for workflows missing them

Author: georgeh0

.github/workflows/_docs_release.yml

@@ -3,6 +3,10 @@ name: Release Docs (INTERNAL)
 on:
   workflow_call:
 
+permissions:
+  contents: read
+  pages: write
+
 jobs:
   deploy:
     runs-on: ubuntu-latest

.github/workflows/_test.yml

@@ -3,6 +3,9 @@ name: Run Tests (INTERNAL)
 on:
     workflow_call:
 
+permissions:
+  contents: read
+
 env:
   CARGO_TERM_COLOR: always
 

.github/workflows/docs_test.yml

@@ -7,6 +7,9 @@ on:
       - docs/**
       - ".github/workflows/docs_test.yml"
 
+permissions:
+  contents: read
+
 jobs:
   test-deploy:
     runs-on: ubuntu-latest