ci: tweak workflow permissions more (#2026)* ci: fix clear cache workflow permissions* fix perms for deployment/nightly* more finely scope other tasks* fix nightly* change name* fix docs permissions