chore(ci): add explicit least-privilege workflow permissions #7861

Job	Run time
integration-test-s3	1m 21s
integration-test	10m 48s
integration-test-gcs	1m 17s
cibw-dev-env-smoke-test	31s
lint-and-unit-test (3.10)	2m 54s
integration-test-adls	1m 23s
lint-and-unit-test (3.12)	2m 56s
lint-and-unit-test (3.13)	3m 19s
lint-and-unit-test (3.11)	2m 51s
integration-coverage-report	30s
	27m 50s

Provide feedback