give least permissible privileges (#942)

Author: anveshreddy18

.github/workflows/non-release.yaml

@@ -10,7 +10,7 @@ jobs:
       mode: snapshot
     secrets: inherit
     permissions:
-      contents: write
+      contents: read
       packages: write
       id-token: write
 

.github/workflows/release.yaml

@@ -13,7 +13,7 @@ jobs:
   build:
     uses: ./.github/workflows/build.yaml
     permissions:
-      contents: write
+      contents: read
       id-token: write
       packages: write
     with: