ci: update workflow permissions

.github/workflows/docs-deploy.yaml

@@ -13,6 +13,9 @@ on:
   workflow_dispatch:
   workflow_call:
 
+permissions:
+  contents: write
+
 jobs:
   deploy-docs:
     runs-on: ubuntu-latest

.github/workflows/example-layout-slots-deploy.yaml

@@ -6,6 +6,9 @@ on:
       - v*
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   deploy-docs:
     runs-on: ubuntu-latest

.github/workflows/lint.yaml

@@ -8,6 +8,9 @@ on:
     branches: [main]
   workflow_call:
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     runs-on: ubuntu-latest

.github/workflows/release.yaml

@@ -5,6 +5,10 @@ on:
     tags:
       - v*
 
+permissions:
+  contents: write
+  id-token: write
+
 jobs:
   lint:
     uses: ./.github/workflows/lint.yaml
@@ -16,9 +20,6 @@ jobs:
     if: github.repository == 'pengzhanbo/vuepress-theme-plume'
     needs: [test, lint]
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      id-token: write
     steps:
       - uses: actions/checkout@v6
         with:

.github/workflows/test.yaml

@@ -8,6 +8,9 @@ on:
     branches: [main]
   workflow_call:
 
+permissions:
+  contents: read
+
 jobs:
   unit-test:
     runs-on: ubuntu-latest