Set read-only permissions in GitHub actions by default.
Set read-only permissions in GitHub actions by default.

PiperOrigin-RevId: 457934562
Change-Id: Ic8162a799ec53f1e2d9a092d2737ac7842db8891

deepmind/meltingpot,deepmind/meltingpot