ci: move workflow permissions to job level (SonarCloud)

Author: peter-matkovski

.github/workflows/publish-new-version.yml

@@ -18,17 +18,19 @@ concurrency:
   cancel-in-progress: false
 jobs:
   pre_release_check:
+    permissions:
+      contents: read
     name: Pre release check
     runs-on: ubuntu-24.04
     environment: 'publish'
-    permissions:
       contents: read
     steps:
       - name: Check
         id: pre_release_check_step
         run: echo "Pre release check"
   publish:
     permissions:
+      contents: read
       contents: write
     needs: pre_release_check
     uses: GetStream/stream-build-conventions-android/.github/workflows/release.yml@8c5fbade4ee9c06a0a979bcb0866e64669254f73