chore(ci): add explicit least-privilege workflow permissions #7864

Job	Run time
integration-test-gcs	1m 8s
integration-test	7m 42s
cibw-dev-env-smoke-test	32s
integration-test-s3	1m 11s
lint-and-unit-test (3.13)	2m 57s
integration-test-adls	1m 19s
lint-and-unit-test (3.11)	2m 44s
lint-and-unit-test (3.10)	3m 15s
lint-and-unit-test (3.12)	2m 56s
integration-coverage-report	1s
	23m 45s

Provide feedback