fix: Permissions

Author: tmathern

.github/workflows/build-wheel.yml

@@ -16,6 +16,11 @@ on:
       github-token:
         required: true
 
+permissions:
+  contents: read
+  packages: read
+  actions: read
+
 jobs:
   build:
     runs-on: ${{ inputs.runs-on }}

.github/workflows/build.yml

@@ -19,6 +19,9 @@ on:
         required: true
         default: 'false'
 
+permissions:
+  contents: read
+
 jobs:
   # TODO reactivate tests & debug test runs once publishing squared out
   # tests:
@@ -111,7 +114,6 @@ jobs:
 
   sdist:
     runs-on: ubuntu-latest
-
     if: |
       github.event_name != 'pull_request' ||
       github.event.pull_request.author_association == 'COLLABORATOR' ||