update workflows (#2018)

.github/workflows/is-compatible.yml

@@ -1,11 +1,14 @@
 name: Latest Grafana API compatibility check
 on: [pull_request]
+permissions: {}
 
 jobs:
   compatibilitycheck:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: actions/setup-node@v3
         with:
           node-version-file: '.nvmrc'