chore: update workflow permissions for github token#3284