fix(ci): grant Scorecard's called workflow contents:read (last startup_failure)

fix(ci): grant Scorecard's called workflow contents:read (last startup_failure) #1027