ci: declare workflow-level contents: read on 3 workflows
#9768
+10
−0
contents: read on 3 workflows
#9768