ci: declare workflow-level contents: read on compile-check and todos-check
#17753
+6
−0
contents: read on compile-check and todos-check
#17753