GHA: add explicit permissions

Author: mathause

.github/workflows/upstream-dev-ci.yaml

@@ -21,6 +21,9 @@ jobs:
   upstream-dev:
     name: upstream-dev
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      issues: write
     if: |
         always()
         && (
@@ -83,8 +86,8 @@ jobs:
         if: |
           failure()
           && steps.status.outcome == 'failure'
-          && github.event_name == 'schedule'
-          && github.repository_owner == 'mpytools'
+          # && github.event_name == 'schedule'
+          # && github.repository_owner == 'mpytools'
         uses: xarray-contrib/issue-from-pytest-log@v1
         with:
           log-path: output-${{ matrix.python-version }}-log.jsonl