Grant workflows permission so sync can push upstream workflow files

GITHUB_TOKEN requires the workflows scope to push branches that
contain changes to .github/workflows/. Without it GitHub rejects
the push when the upstream release includes new or modified workflows.

Author: trevorgowing

.github/workflows/teal-sync-upstream-release.yml

@@ -16,6 +16,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+      workflows: write
 
     steps:
       - name: Checkout fork