ci: declare workflow-level contents: read on maven, pr-checks, version-increments
#3322
+9
−0
contents: read on maven, pr-checks, version-increments
#3322