Document GITHUB_TOKEN permissions needed explicitely

[dolmen]

It would be helpful to document explicitely in README.md what GITHUB_TOKEN permissions must be granted.

The actions/setup-go (which uses actions/cache) recommends contents: read but I would like to be sure that, as a user of setup-go I don't need to grant more permissions (or better if I could remove some).