ci: scope down GitHub Token permissions (#1202)

* ci: scope down permissions for build-and-test.yaml

* ci: scope down permissions for stale.yml

Author: AdnaneKhan

.github/workflows/build-and-test.yaml

@@ -18,6 +18,9 @@ env:
   GITHUB_TOKEN: ${{ secrets.EC2_BOT_GITHUB_TOKEN }}
   WEBHOOK_URL: ${{ secrets.WEBHOOK_URL }}
 
+permissions:
+  contents: read
+
 jobs:
   fastTests:
     name: Fast Test

.github/workflows/stale.yml

@@ -4,6 +4,10 @@ on:
   schedule:
     - cron: "0 17 * * *"  # Runs every day at 12:00PM CST
 
+permissions:
+  issues: write
+  pull-requests: write
+
 jobs:
   stale:
     runs-on: ubuntu-24.04