chore(workflows): set workflow permissions in jobs

.github/workflows/compress-images.yml

@@ -8,15 +8,17 @@ on:
   schedule:
     - cron: "00 23 * * 0"
 
-permissions:
-  contents: write
-  statuses: write
-  pull-requests: write
-
 jobs:
   CompressOnDemandOrSchedule:
     name: calibreapp/image-actions
+
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      statuses: write
+      pull-requests: write
+
     steps:
       - name: Checkout Repo
         uses: actions/checkout@v4