ci: Set and enforce more default permissions (#60222)

Release Notes:

- N/A
283d5054ecFinn Evers committed on 7/6/2026, 4:02:54 PM· committed by GitHubparent5d6c88c
62 files changedLine totals unavailable