Apply remaining changes

Co-authored-by: aeiwz <77935765+aeiwz@users.noreply.github.com>

Author: Copilot

.github/workflows/benchmark.yml

@@ -27,6 +27,9 @@ concurrency:
   group: benchmark-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   benchmark:
     name: benchmark (${{ matrix.os }})