ci: declare workflow-level contents: read on 1 workflows
#23351
+3
−0
contents: read on 1 workflows
#23351