Would love to set all Workflow permissions to read only by default: https://github.com/integrations/terraform-provider-github/pull/2309
