[security] Expand workflow permissions directly into job definitions

[BenjaminPelletier]

I thought #887 would resolve the code scanner findings regarding permissions, but the permissions in the uses block apparently are not counted by the scanner. This PR promotes the permissions definitions directly into the workflow job definitions in an attempt to resolve these automated code scanner findings.