1.26.14
[1.26] Speed up Python 3.11 CI by upgrading coverage
Set GHA token permissions to be read-only
Update publish workflow on 1.26.x to match main