fix: set token permission as readonly (#1913)

## Proposed change

<!-- Please include a summary of the changes and the related issue.
Please also include relevant motivation and context. List any
dependencies that is required for this change. -->

## Related issues

- 🐛 Fixes #(issue)
- 🚀 Feature #(issue)

<!-- Please make sure to follow the contributing guidelines on
https://github.com/amadeus-digital/Otter/blob/main/CONTRIBUTING.md -->

.github/workflows/clean-cache.yml

@@ -10,16 +10,14 @@ on:
     branches:
       - '**'
 
-permissions:
-  contents: read
+permissions: read-all
 
 jobs:
   clean-cache:
     runs-on: ubuntu-latest
     permissions:
       # Needed to delete cache from action
       actions: write
-      contents: read
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Clean Branch Cache

.github/workflows/tests-reporter.yml

@@ -6,13 +6,13 @@ on:
     types:
       - completed
 
+permissions: read-all
+
 jobs:
   publish-ut-reports:
     runs-on: ubuntu-latest
     permissions:
-      contents: read
-      actions: read
-      # Required to publish Unit Test Report to the pipelne execution result
+      # Required to publish Unit Test Report to the pipeline execution result
       checks: write
     steps:
       - uses: dorny/test-reporter@31a54ee7ebcacc03a09ea97a7e5465a47b84aea5 # v1.9.1
@@ -25,9 +25,7 @@ jobs:
   publish-it-reports:
     runs-on: ubuntu-latest
     permissions:
-      contents: read
-      actions: read
-      # Required to publish Integration Test Report to the pipelne execution result
+      # Required to publish Integration Test Report to the pipeline execution result
       checks: write
     steps:
       - uses: dorny/test-reporter@31a54ee7ebcacc03a09ea97a7e5465a47b84aea5 # v1.9.1