ci(test): cap GITHUB_TOKEN to contents: read
#907
+3
−0
GITHUB_TOKEN to contents: read
#907