fix(workflows): assign explicit permissions (#123)

fix(workflows): assign explicit permissions (#123) #166