deploy.yml: add permissions contents: read
(#1925)
#767
release-notes.yml
on: push
update_release_draft
4s
contents: read
(#1925)
#767