Potential fix for code scanning alert no. 6: Workflow does not contain permissions (#344)

Signed-off-by: Zac Rosenbauer <zac@joggr.io>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: zrosenbauer

.github/workflows/ci.yaml

@@ -41,6 +41,9 @@ jobs:
     name: 'Dependabot (auto-merge)'
     needs: [ci]
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     timeout-minutes: 5
     if: ${{ github.actor == 'dependabot[bot]' && github.event_name == 'pull_request'}}
     steps: