Restrict workflow permissions #3626

Job	Run time
Diagnostic export (windows-latest, nightly-latest)	4m 18s
Diagnostic export (ubuntu-latest, nightly-latest)	1m 11s
Diagnostic export (macos-latest, nightly-latest)	1m 36s
Diagnostic export (ubuntu-latest, linked)	58s
Diagnostic export (windows-latest, linked)	2m 30s
Diagnostic export (macos-latest, linked)	1m 17s
	11m 50s

Provide feedback