adding toplevel permissions to workflows missing them

Signed-off-by: Robert Sirchia <rsirchia@outlook.com>

.github/workflows/release.yml

@@ -7,6 +7,8 @@ on:
     branches:
       - main
 
+permissions: read-all
+
 # Note the only differences between release and canary-release jobs are:
 # - only canary passes --overwrite flag
 # - the VERSION make variable passed to 'make dist checksum' is expected to