GHA: add explicit permissions (#166)

* GHA: add explicit permissions

* remove instead of comment

* only write

* fix location

* revert conditions

Author: mathause

.github/workflows/upstream-dev-ci.yaml

@@ -21,6 +21,8 @@ jobs:
   upstream-dev:
     name: upstream-dev
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     if: |
         always()
         && (
@@ -85,6 +87,6 @@ jobs:
           && steps.status.outcome == 'failure'
           && github.event_name == 'schedule'
           && github.repository_owner == 'mpytools'
-        uses: xarray-contrib/issue-from-pytest-log@v1
+        uses: scientific-python/issue-from-pytest-log@v1
         with:
           log-path: output-${{ matrix.python-version }}-log.jsonl