add token permissions for CIs

[TianlongLiang]

No description provided.

[TianlongLiang]

Set top-level permissions as contents: read as described in GitHub's documentation.
Set any required write permissions at the job-level. Only set the permissions required for that job:

• For jobs that create release/tag or upload release artifact, it needs to be granted contents: write permission
• For jobs that upload cached artifacts, it needs to be granted actions: write permission

[lum1n0us]

LGTM