doc: add additional explanation to the wildcard section in permissions #58254

	name: Test Linux

	on:
	pull_request:
	paths-ignore:
	- README.md
	- .github/**
	- '!.github/workflows/test-linux.yml'
	types: [opened, synchronize, reopened, ready_for_review]
	push:
	branches:
	- main
	- canary
	- v[0-9]+.x-staging
	- v[0-9]+.x
	paths-ignore:
	- README.md
	- .github/**
	- '!.github/workflows/test-linux.yml'

	concurrency:
	group: ${{ github.workflow }}-${{ github.head_ref \|\| github.run_id }}
	cancel-in-progress: true

	env:
	PYTHON_VERSION: '3.12'
	FLAKY_TESTS: keep_retrying
	CC: sccache clang
	CXX: sccache clang++
	SCCACHE_GHA_ENABLED: 'true'

	permissions:
	contents: read

	jobs:
	test-linux:
	if: github.event.pull_request.draft == false
	runs-on: ubuntu-24.04
	steps:
	- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
	with:
	persist-credentials: false
	- name: Set up Python ${{ env.PYTHON_VERSION }}
	uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
	with:
	python-version: ${{ env.PYTHON_VERSION }}
	- name: Set up sccache
	uses: mozilla-actions/sccache-action@2e7f9ec7921547d4b46598398ca573513895d0bd # v0.0.4
	with:
	version: v0.8.0
	- name: Environment Information
	run: npx envinfo
	- name: Build
	run: make build-ci -j4 V=1 CONFIG_FLAGS="--error-on-warn"
	- name: Test
	run: make run-ci -j4 V=1 TEST_CI_ARGS="-p actions --node-args='--test-reporter=spec' --node-args='--test-reporter-destination=stdout' --measure-flakiness 9"

Provide feedback