Revert "build: harden GitHub workflow permissions"