Limit some workflow permissions #2852

Job	Run time
Validate GNU Docker image builds	36s
Validate musl Docker image builds	21s
Lint bash, docker, markdown, and yaml	1m 42s
aarch64 Linux glibc	4m 11s
arm64 Apple Darwin	4m 25s
armhf Linux glibc	4m 12s
arm Linux glibc	4m 12s
riscv64 Linux glibc	4m 11s
Validate GNU Docker release image builds	30s
Validate musl Docker release image builds	20s
Validate Windows Docker image builds	4m 10s
Validate Windows Docker release image builds	4m 9s
Verify CHANGELOG is valid	4s
x86-64 Linux glibc	3m 46s
x86-64 Apple Darwin	4m 4s
x86-64 Windows MSVC	3m 43s
x86-64 Linux musl	4m 5s
use ${{ matrix.directives }}	1s
	48m 42s

Provide feedback