ci: move permissions from job to workflow level

Author: shimomo

.github/workflows/keepalive.yml

@@ -9,12 +9,13 @@ concurrency:
   group: keepalive
   cancel-in-progress: false
 
+permissions:
+  actions: write
+
 jobs:
   keepalive:
     name: Keep Workflows Alive on Ubuntu 24.04
     runs-on: ubuntu-24.04
-    permissions:
-      actions: write
     steps:
       - name: Re-enable Workflows
         env:

.github/workflows/test.yml

@@ -9,13 +9,14 @@ on:
     - cron: '0 0 * * *'
   workflow_dispatch:
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   test:
     name: PHPUnit ${{ matrix.phpunit-version }} on PHP ${{ matrix.php-version }} (Ubuntu 24.04)
     runs-on: ubuntu-24.04
-    permissions:
-      contents: read
-      id-token: write
     strategy:
       matrix:
         php-version: