fix: resolve open GitHub security findings (#630)

.github/workflows/draft-or-update-next-release.yml

@@ -7,6 +7,10 @@ on:
       - master
   workflow_dispatch:
 
+permissions:
+  contents: write
+  pull-requests: read
+
 jobs:
   prepare-deployment:
     name: 📝 Draft or update next release

.github/workflows/merge-to-master.yml

@@ -4,6 +4,9 @@ on:
   push:
     branches: [master]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest