ci(l1, l2, levm): fix workflow permissions. (#5064)

**Motivation**
Fix regression added in #5009

**Description**
- Some workflows need more permissions that were granted

Author: mpaulucci

.github/workflows/common_failure_alerts.yaml

@@ -22,6 +22,7 @@ on:
 
 permissions:
   contents: read
+  actions: read
 
 jobs:
   notify-on-failure:
@@ -61,10 +62,12 @@ jobs:
                 run_id: runId,
                 per_page: 100,
               },
-              response =>
-                response.data.jobs.filter(
+              response => {
+                const jobs = Array.isArray(response?.data?.jobs) ? response.data.jobs : [];
+                return jobs.filter(
                   job => job.conclusion && failingConclusions.has(job.conclusion)
-                )
+                );
+              }
             );
             const ignoredJobs = new Set(['Integration Test']);
             const relevantJobs = failedJobs

.github/workflows/pr-main_levm.yaml

@@ -17,6 +17,9 @@ concurrency:
   cancel-in-progress: true
 
 permissions:
+  contents: read
+  actions: write
+  issues: write
   pull-requests: write
 
 jobs:

.github/workflows/pr_loc.yaml

@@ -5,6 +5,8 @@ on:
     branches: ["**"]
 
 permissions:
+  contents: read
+  issues: write
   pull-requests: write
 
 jobs:

.github/workflows/pr_perf_blocks_exec.yaml

@@ -5,6 +5,9 @@ on:
     branches: ["**"]
 
 permissions:
+  contents: read
+  actions: write
+  issues: write
   pull-requests: write
 
 jobs:

.github/workflows/pr_perf_build_block_bench.yml

@@ -8,6 +8,8 @@ on:
   #branches: ["**"]
 
 permissions:
+  contents: read
+  issues: write
   pull-requests: write
 
 jobs:

.github/workflows/pr_perf_levm.yaml

@@ -9,6 +9,9 @@ on:
   workflow_dispatch:
 
 permissions:
+  contents: read
+  actions: write
+  issues: write
   pull-requests: write
 
 jobs:

.github/workflows/pr_perf_trie.yml

@@ -8,6 +8,8 @@ on:
       - "crates/common/trie/**"
 
 permissions:
+  contents: read
+  issues: write
   pull-requests: write
 
 jobs:

.github/workflows/tag_release.yaml

@@ -8,6 +8,7 @@ on:
 permissions:
   contents: write
   packages: write
+  actions: write
 
 env:
   REGISTRY: ghcr.io
@@ -185,6 +186,7 @@ jobs:
       packages: write
       attestations: write
       id-token: write
+      actions: write
 
     steps:
       - name: Checkout code