Reduce GitHub Action permissions

[mpkorstanje]

⚡️ What's your motivation?

Address Zizmor finding:

• https://docs.zizmor.sh/audits/#excessive-permissions
• https://docs.zizmor.sh/audits/#unpinned-uses
• https://docs.zizmor.sh/audits/#artipacked

🏷️ What kind of change is this?

• 🏦 Refactoring/debt/DX (improvement to code design, tooling, etc. without changing behaviour)

📋 Checklist:

• I agree to respect and uphold the Cucumber Community Code of Conduct