.github: Restrict permissions on cross-build jobs.
(cherry picked from commit aca7ff471acffb59f0f9e2cc4de6363872444fcc)