Restrict GitHub Actions token permissions

All automated workflows now explicitly declare minimal token permissions required for their tasks, preventing unnecessary access to repository resources. This improves security by ensuring each workflow job only gets the specific permissions it needs, and also fixes a Vue package workflow trigger that wasn't running on relevant changes.