[actions] re-add a finisher; add perms

Author: ljharb

Diff for: .github/workflows/node-aught.yml

@@ -2,6 +2,9 @@ name: 'Tests: node.js < 10'
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: ljharb/actions/.github/workflows/node.yml@main
@@ -10,3 +13,10 @@ jobs:
       type: minors
       command: npm run tests-only
       skip-ls-check: true
+
+  node:
+    name: 'node < 10'
+    needs: [tests]
+    runs-on: ubuntu-latest
+    steps:
+      - run: true

Diff for: .github/workflows/node-pretest.yml

@@ -2,6 +2,9 @@ name: 'Tests: pretest/posttest'
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: ljharb/actions/.github/workflows/pretest.yml@main

Diff for: .github/workflows/node-tens.yml

@@ -12,3 +12,10 @@ jobs:
       range: '>= 10 < 20'
       type: minors
       command: npm run tests-only
+
+  node:
+    name: 'node 10 - 20'
+    needs: [tests]
+    runs-on: ubuntu-latest
+    steps:
+      - run: true

Diff for: .github/workflows/require-allow-edits.yml

@@ -2,8 +2,14 @@ name: Require “Allow Edits”
 
 on: [pull_request_target]
 
+permissions:
+  contents: read
+
 jobs:
   _:
+    permissions:
+      pull-requests: read  # for ljharb/require-allow-edits to check 'allow edits' on PR
+
     name: "Require “Allow Edits”"
 
     runs-on: ubuntu-latest