ci: update token permission, only give contents: read
#7643
title.yml
on: pull_request_target
Validate PR title
4s
contents: read
#7643