Limit some workflow permissions #2851

Job	Run time
Validate GNU Docker image builds	41s
Lint bash, docker, markdown, and yaml	1m 41s
arm64 Apple Darwin	11m 35s
aarch64 Linux glibc	11m 19s
armhf Linux glibc	11m 19s
arm Linux glibc	11m 19s
riscv64 Linux glibc	11m 18s
Validate GNU Docker release image builds	46s
Validate musl Docker image builds	18s
Validate musl Docker release image builds	19s
Validate Windows Docker image builds	9m 5s
Validate Windows Docker release image builds	8m 38s
Verify CHANGELOG is valid	7s
x86-64 Linux glibc	10m 26s
x86-64 Linux musl	10m 32s
x86-64 Apple Darwin	10m 36s
x86-64 Windows MSVC	9m 29s
use ${{ matrix.directives }}	1s
	1h 59m 29s

Provide feedback