chore(update-yara-x): add workflows: write

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>

Author: egibs

.github/chainguard/update-yara-x.sts.yaml

@@ -6,3 +6,4 @@ claim_pattern:
 permissions:
   contents: write
   pull_requests: write
+  workflows: write

.github/workflows/update-yara-x.yaml

@@ -86,6 +86,7 @@ jobs:
       contents: write
       id-token: write
       pull-requests: write
+      workflows: write
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0