ci: declare workflow-level contents: read on 4 workflows
#3838
+10
−0
contents: read on 4 workflows
#3838