Feature: Set Token Permissions in Workflows

[stephenfuqua]

Update all GitHub Actions workflows to set the token permissions. By default, all should start with the read-all permission at the workflow level. Add in other permissions as necessary, for example the security write permission may be required for CodeQL.