Doc workflow should declare required permissions

[jsoref]

• I have searched the issues of this repo and believe that this is not a duplicate.
• I have searched the FAQ and general documentation and believe that my question is not already covered.

Feature Request

GitHub workflows that do interesting things should define the permissions they require: https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs#overview

In the case of the doc workflow, it needs contents: read to checkout, and amondnet/vercel-action@v25 github-comment needs pull-requests: write

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.