[ci] Scope permissions for runtime_commit_artifacts.yml

[poteto]

By default the github token is used with write-all permissions. Let's scope it down to just what we need.

https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions#permissions

Stack created with Sapling. Best reviewed with ReviewStack.

• [ci] Scope permissions for all workflows #32704
• -> [ci] Scope permissions for runtime_commit_artifacts.yml #32701

[react-sizebot]

Comparing: e1e7407...a47ab6d

Critical size changes

Includes critical production bundles, as well as any change greater than 2%:

Name	+/-	Base	Current	+/- gzip	Base gzip	Current gzip
oss-stable/react-dom/cjs/react-dom.production.js	=	6.68 kB	6.68 kB	+0.05%	1.83 kB	1.83 kB
oss-stable/react-dom/cjs/react-dom-client.production.js	=	517.29 kB	517.29 kB	=	92.26 kB	92.26 kB
oss-experimental/react-dom/cjs/react-dom.production.js	=	6.69 kB	6.69 kB	+0.05%	1.83 kB	1.83 kB
oss-experimental/react-dom/cjs/react-dom-client.production.js	=	617.68 kB	617.68 kB	=	109.55 kB	109.55 kB
facebook-www/ReactDOM-prod.classic.js	=	653.74 kB	653.74 kB	=	115.19 kB	115.20 kB
facebook-www/ReactDOM-prod.modern.js	=	644.02 kB	644.02 kB	=	113.61 kB	113.61 kB

Significant size changes

Includes any change greater than 0.2%:

(No significant changes)

Generated by 🚫 dangerJS against a47ab6d

[josephsavona]

I'm not an expert here but this makes sense

[poteto]

Test (dry) run: https://github.com/facebook/react/actions/runs/13998311423