🔧 fix: add workflow perms

Author: Rettend

.github/workflows/publish.yml

@@ -4,7 +4,7 @@ on:
   push:
     tags:
       - 'v*'
-        
+
 permissions:
   contents: read
 

.github/workflows/update.yml

@@ -6,7 +6,11 @@ on:
     paths:
       - package-lock.json
       - package.json
-    
+
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   update-css:
     if: github.actor == 'dependabot[bot]' && contains(github.event.pull_request.title, 'material-icon-theme')