[3.12] Default GHA permissions to contents: read (GH-148346)

[3.12] Default GHA permissions to contents: read (GH-148346) #250289