chore(ci): add explicit least-privilege workflow permissions #7862

Job	Run time
integration-test-s3	1m 18s
integration-test	2m 43s
integration-test-adls	1m 16s
lint-and-unit-test (3.12)	2m 43s
lint-and-unit-test (3.13)	2m 43s
integration-test-gcs	1m 17s
lint-and-unit-test (3.10)	2m 43s
cibw-dev-env-smoke-test	26s
lint-and-unit-test (3.11)	2m 40s
integration-coverage-report	1s
	17m 50s

Provide feedback