Several CI/Workflow changes and fixes

.github/workflows/mkdocs-deploy.yml

@@ -1,13 +1,13 @@
 name: Deploy 'Custom Unix Terminal' GitHub Page
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: ["main"]
   workflow_dispatch:
 
-permissions:
-  contents: write
-
 jobs:
   deploy:
     runs-on: ubuntu-latest

.github/workflows/update-from-submodule.yml

@@ -1,15 +1,15 @@
 name: Update From Submodule
 
+permissions:
+  contents: write
+
 on:
   pull_request_target:
     types: [opened, synchronize]
     branches:
       - main
   workflow_dispatch:
 
-permissions:
-  contents: write
-
 jobs:
   update-files:
     if: github.actor == 'renovate[bot]' && startsWith(github.event.pull_request.head.ref, 'renovate/submodules-')