ci: update runner types and permissions in workflow files

[jikkai]

close #xxx

Pull Request Checklist

• Related tickets or issues have been linked in the PR description (or missing issue).
• Naming convention is followed (do please check it especially when you created new plugins, commands and resources).
• Unit tests have been added for the changes (if applicable).
• Breaking changes have been documented (or no breaking changes introduced in this PR).

[github-actions]

Playwright test results

 8 passed

Details

 8 tests across 3 suites
 3 minutes, 31 seconds
 b57a692
 For more information, see full report and artifacts

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.24%. Comparing base (19b745c) to head (b57a692).

Additional details and impacted files

@@           Coverage Diff           @@
##              dev    #7148   +/-   ##
=======================================
  Coverage   80.24%   80.24%           
=======================================
  Files        2527     2527           
  Lines      151754   151754           
  Branches    35105    35105           
=======================================
  Hits       121775   121775           
  Misses      29979    29979           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

View Deployment

📑 Demo (React@19)	Demo (React@16)	📚 Storybook
🔗 Preview link	🔗 Preview link	🔗 Preview link