Set github actions workflow permissions

Author: benfred

.github/workflows/build.yml

@@ -1,4 +1,7 @@
 name: Build
+permissions:
+  contents: read
+  pull-requests: write
 
 on:
   workflow_dispatch:
@@ -346,6 +349,8 @@ jobs:
     runs-on: ubuntu-latest
     if: "startsWith(github.ref, 'refs/tags/')"
     needs: [test-wheels]
+    permissions:
+      contents: write
     steps:
       - uses: actions/download-artifact@v8
         with:

.github/workflows/release-drafter.yml

@@ -1,5 +1,8 @@
 # draft release notes with https://github.com/release-drafter/release-drafter
 name: Release Drafter
+permissions:
+  contents: read
+  pull-requests: write
 
 on:
   push:

.github/workflows/update_python_test.yml

@@ -1,4 +1,7 @@
 name: Update Python Test Versions
+permissions:
+  contents: write
+  pull-requests: write
 on:
   workflow_dispatch:
   schedule: