ci: add minimum GitHub token permissions for workflows

Signed-off-by: Ashish Kurmi <[email protected]>

Author: ashishkurmi

.github/workflows/cd-helm-workflow.yml

@@ -22,8 +22,14 @@ on:
     - 'aio/scripts/helm-release-chart.sh'
     - '.github/workflows/cd-helm-workflow.yml'
 
+permissions:
+  contents: read
+
 jobs:
   release:
+    permissions:
+      contents: write  # for ad-m/github-push-action to push local changes
+      pull-requests: write  # for repo-sync/pull-request to create pull requests
     name: Helm Chart Release
     runs-on: ubuntu-latest