Use minimal GITHUB_TOKEN permissions for metrics and subtree workflow

[AdnaneKhan]

Please add a description of your PR.
If this is a solution to an open challenge, please explain your solution.

Don't forget to check our book to ensure your solution satisfy the overall
requirements as well as the challenge success criteria.

This PR uses minimal GitHub Token permissions for writing to a branch and creating a PR instead of relying on overly permissive defaults.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 and MIT licenses.