ci: explicitly define permissions for each job and as the first prope… #1318

Job	Run time
audit_dependencies	7s
test	10s
test_generated_apps (defaults, ackama_rails_template.config.yml)	4m 26s
rubocop	8s
test_generated_apps (all, ci/configs/all.yml)	5m 43s
test_generated_apps (all-typescript, ci/configs/all-typescript.yml)	6m 47s
test_generated_apps (basic, ci/configs/basic.yml)	3m 53s
test_generated_apps (basic-typescript, ci/configs/basic-typescript.yml)	4m 31s
test_generated_apps (github_actions, ci/configs/github_actions.yml)	3m 52s
test_generated_apps (react, ci/configs/react.yml)	4m 23s
test_generated_apps (react-typescript, ci/configs/react-typescript.yml)	5m 3s
test_generated_apps (sidekiq, ci/configs/sidekiq.yml)	3m 55s
test_generated_apps (devise, ci/configs/devise.yml)	4m 46s
test_generated_apps (basic_with_skips, ci/configs/basic.yml, --skip-spring --skip-javascript)	3m 45s
test_generated_apps (bootstrap, ci/configs/bootstrap.yml)	3m 59s
test_generated_apps (bootstrap-typescript, ci/configs/bootstrap-typescript.yml)	4m 49s
test_generated_apps (capistrano, ci/configs/deploy_with_capistrano.yml)	3m 49s
test_generated_apps (ackama_ec2_capistrano, ci/configs/deploy_with_ackama_ec2_capistrano.yml)	3m 57s
	1h 8m 3s

Provide feedback