Potential fix for code scanning alert no. 1: Workflow does not contain permissions

[kylecorry31]

Potential fix for https://github.com/kylecorry31/Trail-Sense/security/code-scanning/1

The fix for this problem is to add a permissions block to the job definition (or to the root of the workflow if multiple jobs share the same requirements) specifying the minimum needed permissions. In this workflow, most steps require only read access to repository contents, but the Create Pull Request step needs permission to write to pull requests. Therefore, the recommended fix is to add:

permissions:
  contents: read
  pull-requests: write

to the root of the workflow file, which will apply these permissions to all jobs in the workflow. If you expect to create multiple jobs with different permissions in the future, you may also set it at the job level. In this case, since there is only one job, setting at the root is simplest and follows best practices.

You should insert the block near the top, after the workflow name (as per the YAML structure shown in the example), and before the on: block.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.