ci: declare workflow-level contents: read on 16 build/regen workflows (#2584)