Fix workflow permission

[trask]

I tested this and "pull-request: write" is needed when the "issue" is a pull request

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 89.75%. Comparing base (7a4a452) to head (4a961d6).
Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #7408   +/-   ##
=========================================
  Coverage     89.75%   89.75%           
  Complexity     6981     6981           
=========================================
  Files           797      797           
  Lines         21160    21160           
  Branches       2056     2056           
=========================================
  Hits          18993    18993           
  Misses         1505     1505           
  Partials        662      662           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.