Fix code scanning alert - Harden Token-Permissions

[reactive-firewall]

Add more restrictive default permissions to actions for more defence-in-depth.

Tracking issue for:

• https://github.com/reactive-firewall/python-repo/security/code-scanning/83
• https://github.com/reactive-firewall/python-repo/security/code-scanning/84
• https://github.com/reactive-firewall/python-repo/security/code-scanning/85

[reactive-firewall]

Scan still not happy with some tokens:
see

• https://github.com/reactive-firewall/python-repo/security/code-scanning/93