Add workflow level read-only permission for build workflow to support new default permissions github policy.