chore(ci): address ossf scorecard findings on npm, pip, and top-level permission leftover by heitorlessa · Pull Request #2694 · aws-powertools/powertools-lambda-python