Setup GitHub Action Permissions

[michael-hawker]

Before we make the repo public, we should setup the settings for our GitHub actions as described here: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#allowing-specific-actions-to-run

[michael-hawker]

I believe I've set this up now to only allow verified actions or ones in our whitelist. I've added the ones we currently use. If we need others, we'll have to add them in the Action Settings for the repo.