[ci] Add missing permissions

[poteto]

Missed these ones earlier.

Stack created with Sapling. Best reviewed with ReviewStack.

• [ci] Don't use pull_request_target #32708
• -> [ci] Add missing permissions #32707

[react-sizebot]

Comparing: daee085...7a44ebf

Critical size changes

Includes critical production bundles, as well as any change greater than 2%:

Name	+/-	Base	Current	+/- gzip	Base gzip	Current gzip
oss-stable/react-dom/cjs/react-dom.production.js	=	6.68 kB	6.68 kB	+0.05%	1.83 kB	1.83 kB
oss-stable/react-dom/cjs/react-dom-client.production.js	=	515.14 kB	515.14 kB	=	91.73 kB	91.74 kB
oss-experimental/react-dom/cjs/react-dom.production.js	=	6.69 kB	6.69 kB	+0.05%	1.83 kB	1.83 kB
oss-experimental/react-dom/cjs/react-dom-client.production.js	=	615.53 kB	615.53 kB	=	108.89 kB	108.89 kB
facebook-www/ReactDOM-prod.classic.js	=	651.48 kB	651.48 kB	=	114.89 kB	114.89 kB
facebook-www/ReactDOM-prod.modern.js	=	641.76 kB	641.76 kB	=	113.31 kB	113.31 kB

Significant size changes

Includes any change greater than 0.2%:

(No significant changes)

Generated by 🚫 dangerJS against 7a44ebf