build: harden add-to-project.yml permissions

Signed-off-by: Alex <[email protected]>

Author: sashashura

.github/workflows/add-to-project.yml

@@ -9,8 +9,11 @@ on:
     types:
       - opened
 
+permissions: {}
 jobs:
   add-to-project:
+    permissions:
+      repository-projects: write # to add to projects (actions/add-to-project)
     name: Add new bugs and PRs to This Week project
     runs-on: ubuntu-latest
     steps: