Add permission token at topLevel in workflows (#816)

.github/workflows/automatic-doc-checks.yml

@@ -3,13 +3,15 @@ name: Core Documentation Checks
 on:
   - workflow_dispatch
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
   documentation-checks:
-    uses: canonical/documentation-workflows/.github/workflows/documentation-checks.yaml@main
-    with:
-      working-directory: 'docs/moonray'
-
+    - uses: canonical/documentation-workflows/.github/workflows/documentation-checks.yaml@main
+      with:
+        working-directory: 'docs/moonray'

.github/workflows/docs-spelling-checks.yml

@@ -5,6 +5,8 @@ on:
   # pull_request:
   #   paths:
   #     - 'docs/**'
+permissions:
+  contents: read
 
 jobs:
   spell-check:

.github/workflows/sync-images.yaml

@@ -3,6 +3,9 @@ name: Sync upstream images to ghcr.io
 on:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest