Allow enforce PR label workflow to add labels

Author: blink1073

.github/workflows/enforce-label.yml

@@ -10,6 +10,8 @@ on:
 jobs:
   enforce-label:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: enforce-triage-label
         uses: jupyterlab/maintainer-tools/.github/actions/enforce-label@v1