Add permissions blocks to CI workflows, restore logs .gitignore

Author: MackinnonBuck

.github/aw/logs/.gitignore

@@ -0,0 +1,4 @@
+# Ignore all downloaded workflow logs
+*
+# But keep the .gitignore file itself
+!.gitignore

.github/workflows/corrections-tests.yml

@@ -8,6 +8,9 @@ on:
     paths:
       - 'scripts/corrections/**'
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest

.github/workflows/verify-compiled.yml

@@ -6,6 +6,9 @@ on:
       - '.github/workflows/*.md'
       - '.github/workflows/*.lock.yml'
 
+permissions:
+  contents: read
+
 jobs:
   verify:
     runs-on: ubuntu-latest