workflows: adjust token permissions

[NARSimoes]

Summary

workflows: adjust token permissions

Ticket Link

• https://github.com/mattermost/mattermost-plugin-boards/security/code-scanning/7
• https://github.com/mattermost/mattermost-plugin-boards/security/code-scanning/8

Summary by CodeRabbit

• Chores
  • Updated GitHub Actions workflows with enhanced access control configuration.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• ✅ Full review completed - (🔄 Check again to review again)

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch nasimoes-check-tokens

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}