chore(`ci`): harden workflow by setting default permission to read only#320

zerosnacks merged 4 commits intomainfoundry-rs/compilers:mainfrom

zerosnacks/harden-cifoundry-rs/compilers:zerosnacks/harden-ciCopy head branch name to clipboard