[ci] Add missing permissions

Missed these ones earlier.

Author: poteto

.github/workflows/compiler_discord_notify.yml

@@ -19,6 +19,9 @@ jobs:
     if: ${{ needs.check_maintainer.outputs.is_core_team == 'true' }}
     needs: check_maintainer
     runs-on: ubuntu-latest
+    permissions:
+      # Used by check_maintainer
+      contents: read
     steps:
       - name: Discord Webhook Action
         uses: tsickert/discord-webhook@86dc739f3f165f16dadc5666051c367efa1692f4

.github/workflows/runtime_discord_notify.yml

@@ -19,6 +19,9 @@ jobs:
     if: ${{ needs.check_maintainer.outputs.is_core_team == 'true' }}
     needs: check_maintainer
     runs-on: ubuntu-latest
+    permissions:
+      # Used by check_maintainer
+      contents: read
     steps:
       - name: Discord Webhook Action
         uses: tsickert/discord-webhook@86dc739f3f165f16dadc5666051c367efa1692f4

.github/workflows/shared_close_direct_sync_branch_prs.yml

@@ -15,6 +15,9 @@ env:
 jobs:
   close_pr:
     runs-on: ubuntu-latest
+    permissions:
+      # Used to create a review and close PRs
+      pull-requests: write
     steps:
       - name: Close PR
         uses: actions/github-script@v7

.github/workflows/shared_label_core_team_prs.yml

@@ -20,6 +20,11 @@ jobs:
     if: ${{ needs.check_maintainer.outputs.is_core_team == 'true' }}
     runs-on: ubuntu-latest
     needs: check_maintainer
+    permissions:
+      # Used by check_maintainer
+      contents: read
+      # Used to add labels
+      issues: write
     steps:
       - name: Label PR as React Core Team
         uses: actions/github-script@v7