Set GH token permissions default to contents: read and none for the rest

[Nargonath]

trafficstars

This relates to #4355. This PR is to test the settings to make sure they work and then we can apply them to hapijs/.github repo and roll them out to the rest of the org.

[Nargonath]

Per GH documentation I don't think we even need the GH token contents: read access. I revoked all permissions to the GH token and kept only the meta: read (default) access since for now our Actions don't seem to need more.

The CI errors are unrelated to this changes as I have them on master as well just by npm i && npm t. They seem to be due to linting errors as there is some kind of confusion with our linting configuration.