[core] Harden GitHub Actions permissions

[step-security-bot]

Based on the current configuration of the repositories:

The GitHub actions have a wide range of permission as documented in: https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token.

From a security perspective, it's better to limit the access that each action has. For example, https://deps.dev/npm/%40mui%2Fmaterial reports that we could do better:

or this API https://api.securityscorecards.dev/projects/github.com/mui/material-ui

Once merged, we can change the default permissions to be read only.

[mui-bot]

These are the results for the performance tests:

Test case	Unit	Min	Max	Median	Mean	σ
Filter 100k rows	ms	458.6	731.2	613.4	599.44	119.509
Sort 100k rows	ms	516.9	911.9	738.1	748.96	137.633
Select 100k rows	ms	156.3	254.5	203.1	196.02	35.71
Deselect 100k rows	ms	132.2	198.1	190.2	172.78	26.397

Generated by 🚫 dangerJS against 561043d

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[oliviertassinari]

I'm merging to unlock it, it has been 10 days.

[cherniavskii]

I think these changes broke the workflow:

• issues with no response aren't closed automatically after 7 days - [pickers] Calendar doesn't circle today's date #6447
• the label is not automatically removed after issue author's response - [data grid] Customize GridColumnsPanel search function #6453