ci(gh): ci(gh): Set read-only permissions (#14)

This only applies for the GH token usage.

Author: olivereisenhut

.github/workflows/continuous-deployment.yml

@@ -4,6 +4,9 @@ on:
     release:
         types: [published]
 
+permissions:
+    contents: read
+
 jobs:
     checks:
         runs-on: ubuntu-latest
@@ -31,9 +34,6 @@ jobs:
 
         needs: checks
 
-        permissions:
-            packages: write
-            contents: read
 
         steps:
             - name: Checkout default branch

.github/workflows/continuous-integration.yml

@@ -5,6 +5,9 @@ on:
         branches:
             - 'main'
 
+permissions:
+    contents: read
+
 env:
     CI: true