chore: add permissions for contents and pull-requests in workflows [patch]

Author: dandehoon

.github/workflows/bump.yml

@@ -7,6 +7,9 @@ on:
 jobs:
   bump:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
     if: |
       contains(github.event.head_commit.message, '[major]') ||
       contains(github.event.head_commit.message, '[minor]') ||

.github/workflows/release.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
 
     # Only run if this is a merge commit (PR merge) and contains version bump
     if: contains(github.event.head_commit.message, 'release: bump version to v')