Apply suggestion from @mikeharder

Author: mikeharder

.github/workflows/check-enforcer.yml

@@ -18,7 +18,7 @@ jobs:
   check-enforcer:
     permissions:
       statuses: write # to set status (azure/azure-sdk-actions)
-      pull-requests: write # to read pull requests and write comments (azure/azure-sdk-actions)
+      pull-requests: read # to read pull requests; use "write" for response comments (azure/azure-sdk-actions)
       checks: read # to read check status (azure/azure-sdk-actions)
     name: Handle ${{ github.event_name }} ${{ github.event.action }} event
     runs-on: ubuntu-latest # This image is intentionally set to "latest", and not to a specific version