browser-use

fix open security advisories: restrict workflow permissions, bump vulnerable deps, remove unused authlib (#4468)

drop unnecessary contents:read from cloud_evals workflow

use contents: read instead of empty permissions on CI workflows

bump pypdf and pillow

remove unused authlib dependency