WIP: Adjust PR handling workflow permissions

[svenklemm]

Any key not present in the permissions will be set to none so we need contents:read even though that is the default.

https://github.blog/changelog/2021-04-20-github-actions-control-permissions-for-github_token/

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (59f50f2) 80.06% compared to head (b4832d4) 81.52%. Report is 14 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #6675      +/-   ##
==========================================
+ Coverage   80.06%   81.52%   +1.45%     
==========================================
  Files         190      190              
  Lines       37181    36392     -789     
  Branches     9450     9459       +9     
==========================================
- Hits        29770    29668     -102     
+ Misses       2997     2966      -31     
+ Partials     4414     3758     -656     

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.