Fix Token-Permissions OpenSSF remarks #4179

Job	Run time
pre-commit / pre-commit	1m 24s
windows / msvc-build (Debug)	3m 7s
windows / msvc-build (Release)	3m 59s
mac / clang-build (Debug)	2m 34s
ubuntu / clang-build (ubuntu-24.04-arm)	2m 22s
windows / clang-build	3m 56s
ubuntu / clang-build (ubuntu-24.04)	3m 0s
mac / clang-build (Release)	2m 6s
ubuntu / gcc-build (ubuntu-24.04, Release)	2m 29s
ubuntu / gcc-build (ubuntu-24.04, Debug)	2m 17s
ubuntu / gcc-build (ubuntu-24.04-arm, Release)	1m 57s
ubuntu / gcc-build (ubuntu-24.04-arm, Debug)	2m 12s
mac / clang-test	4m 54s
ubuntu / gcc-test (ubuntu-24.04)	8m 21s
ubuntu / gcc-test (ubuntu-24.04-arm)	8m 22s
ubuntu / clang-test (ubuntu-24.04-arm)	8m 44s
ubuntu / clang-test (ubuntu-24.04)	8m 24s
ubuntu / clang-sanitizer-build (ubuntu-24.04)	3m 8s
windows / clang-test	3m 27s
windows / msvc-test	5m 6s
ubuntu / clang-sanitizer-test (ubuntu-24.04)	2m 52s
windows / clang-test-extended	3m 25s
mac / clang-test-extended	3m 11s
windows / msvc-test-extended	2m 42s
ubuntu / clang-sanitizer-test-extended (ubuntu-24.04)	2m 25s
ubuntu / gcc-test-extended (ubuntu-24.04)	4m 43s
ubuntu / gcc-test-extended (ubuntu-24.04-arm)	4m 39s
ubuntu / clang-test-extended (ubuntu-24.04-arm)	4m 26s
ubuntu / clang-test-extended (ubuntu-24.04)	4m 32s
ubuntu / gcc-build-codecov	7m 46s
perf / ubuntu-gcc-build-perf-stats	1m 20s
perf / macos-clang-build-perf-stats	1m 44s
pages / build-doxygen-xml	1m 32s
pages / build-scoreboard	18s
pages / build-sphinx	45s
pages / deploy-pages	0s
	2h 8m 9s

Provide feedback