fix(ci): set workflow permissions (contents: read)

fix(ci): set workflow permissions (contents: read) #494