Add permissions for Dependabot in CI workflow (#536)

part of SolidOS/solidos#231 (comment)

Author: timea-solid

.github/workflows/ci.yml

@@ -44,6 +44,9 @@ jobs:
     needs: build # After the E2E and build jobs, if one of them fails, it won't merge the PR.
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' && github.event_name == 'pull_request'}} # Detect that the PR author is dependabot
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
       - name: Enable auto-merge for Dependabot PRs
         run: gh pr merge --auto --merge "$PR_URL" # Use Github CLI to merge automatically the PR