chore(`ci`): rescope permissions according to principle of least privilege #255

Job	Run time
clippy	1m 9s
doctest	49s
test nightly --all-features	1m 11s
fmt	15s
test stable --all-features	1m 9s
test stable --no-default-features	1m 15s
test nightly	1m 11s
test stable	1m 18s
feature-checks	44s
test 1.88	1m 7s
test nightly --no-default-features	1m 23s
test 1.88 --no-default-features	1m 7s
docs	1m 15s
deny / cargo deny check	20s
ci-success	5s
	14m 18s

Provide feedback