ci: scope down GitHub Token permissions

[AdnaneKhan]

Scope Down GitHub Token Permissions

This PR updates GitHub Actions workflows to use minimal required permissions instead of the default elevated permissions.

Why This Matters

Following the principle of least privilege, workflows should only have the specific permissions they need to function.

Changes

This PR adds explicit permissions: blocks to workflows that currently rely on default permissions, scoping them down to only what's required for their operations.

Please review the changes to ensure the specified permissions match your workflow requirements.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.32%. Comparing base (ef37f18) to head (ab696f4).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #3142   +/-   ##
=======================================
  Coverage   54.32%   54.32%           
=======================================
  Files        1041     1041           
  Lines       31926    31926           
  Branches     4708     4708           
=======================================
+ Hits        17344    17345    +1     
+ Misses      12746    12745    -1     
  Partials     1836     1836           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.