Fix auto-merge token and add workflow permissions

Author: endrju19

.github/workflows/ci.yml

@@ -5,6 +5,9 @@ on:
   push:
     branches: ['**']
     tags: [v*]
+permissions:
+  contents: write
+  pull-requests: write
 jobs:
   build:
     # run on 1) push, 2) external PRs, 3) softwaremill-ci PRs
@@ -98,10 +101,13 @@ jobs:
     if: github.event.pull_request.user.login == 'softwaremill-ci'
     needs: [ build, label ]
     uses: softwaremill/github-actions-workflows/.github/workflows/auto-merge.yml@main
+    secrets:
+      github-token: ${{ secrets.SOFTWAREMILL_CI_PR_TOKEN }}
 
   auto-merge-dependabot:
     # only for PRs by dependabot[bot]
     if: github.event.pull_request.user.login == 'dependabot[bot]'
     needs: [ build ]
     uses: softwaremill/github-actions-workflows/.github/workflows/auto-merge.yml@main
-    secrets: inherit
+    secrets:
+      github-token: ${{ secrets.SOFTWAREMILL_CI_PR_TOKEN }}