build: Reduce scope of GHA token

[radeksimko]

This is to take advantage of recently announced changes:
https://github.blog/changelog/2021-04-20-github-actions-control-permissions-for-github_token/

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the context necessary to investigate further.