mernst Reduce permissions for wrapper-validation-action