fix(ci): added the missing permissions block

The workflow declared no `permissions:` block and fell back to the
repository default, which grants only contents and packages read. The
called module requests further scopes, so GitHub refused to start the
run with "is only allowed <scope>: none".

A called workflow's `permissions:` block is a request ceiling, not a
grant - the token is minted from the caller's scopes. Added a block
granting exactly the scopes the called module declares, no more.

Author: karlspace

.github/workflows/teams-notifications.yml

@@ -37,6 +37,12 @@ on:
         type: string
         default: "errors-only"
 
+permissions:
+  contents: read
+  issues: read
+  pull-requests: read
+  actions: read
+
 jobs:
   notify-teams:
     name: Send Teams Notification