chore(ci): Another finetune of workflow security (#184)

.github/workflows/audit.yml

@@ -1,6 +1,7 @@
 name: Security audit
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
   schedule:

.github/workflows/rust.yml → .github/workflows/ci.yml

@@ -1,4 +1,7 @@
-name: Rust
+name: CI
+
+permissions:
+  contents: read
 
 on:
   push:

.github/workflows/functional.yml

@@ -1,7 +1,8 @@
 ---
 name: Functional
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
   pull_request:

.github/workflows/linters.yml

@@ -1,7 +1,8 @@
 ---
 name: Linters
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
   push:

.github/workflows/release-plz.yml

@@ -1,6 +1,6 @@
 name: Release-plz
 
-permissions: read-all
+permissions: {}
 
 on:
   push:

.github/workflows/scorecard.yml

@@ -15,7 +15,8 @@ on:
     branches: [ "main" ]
 
 # Declare default permissions as read only.
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   analysis: