fix: add reaction and read-all permissions for pre_activation

pre_activation job had no permissions, causing Bad credentials on
the membership check. The reaction: eyes field triggers the compiler
to grant write permissions to pre_activation. Also switched to
permissions: read-all to match working event-triggered workflows.

Author: zircote

.github/workflows/flock-action.lock.yml

@@ -7,11 +7,9 @@ timeout-minutes: 30
 on:
   issues:
     types: [opened]
+  reaction: eyes
 
-permissions:
-  contents: read
-  issues: read
-  pull-requests: read
+permissions: read-all
 
 tools:
   github: