fix(ci): workflows start with no token permissions and the Maven wrapper ships no jar

fix(ci): workflows start with no token permissions and the Maven wrapper ships no jar #4672