ci: update token permission, only give contents: read
#7644
title.yml
on: pull_request_target
Validate PR title
5s
contents: read
#7644