fix(ci): tighten GHA permissions

[tallaxes]

Description

This tightens the permissions on GitHub Actions, prepping for expected changes to GITHUB_TOKEN. Should resolve all high Token-Permissions security code scanning alerts (https://github.com/Azure/karpenter-provider-azure/security/code-scanning?query=Token-Permissions+is%3Aopen+branch%3Amain+severity%3Ahigh)

How was this change tested?

• To be tested in CI

Does this change impact docs?

• Yes, PR includes docs updates
• Yes, issue opened: #
• No

Release Note

[coveralls]

Pull Request Test Coverage Report for Build 7672393261

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 97.626%

---

Totals
Change from base Build 7663328991:	0.0%
Covered Lines:	35605
Relevant Lines:	36471

---

💛 - Coveralls

[charliedmcb]

Fine with completing. Just watch the first E2E CI run to make sure the perms actually work.

I have a slightly memory of needing to request the perms at the highest level workflow, but maybe that was just to make things simple.