more action tweaks

Author: aireilly

.github/workflows/vale-on-pull.yml

@@ -6,6 +6,9 @@ jobs:
   vale:
     name: runner / vale
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@v3
       - uses: errata-ai/vale-action@reviewdog