Follow up from #1338: update builds permissions when the source is a private code repo

[leafty]

In this case, transform "Project Write" into "Project Write + Repo Read".

See: #1343, #1338.