build: fix dev-app preview action permissions (#25206)

We have changed the default permissions for Github actions as it seems,
and the PR comment cannot be created in actions without having the
necessary write permission. This commit fixes this.

Author: devversion

.github/workflows/build-dev-app.yml

@@ -11,6 +11,8 @@ on:
   pull_request:
     types: [synchronize, labeled]
 
+permissions: read-all
+
 jobs:
   dev-app-build:
     runs-on: ubuntu-latest

.github/workflows/deploy-dev-app.yml

@@ -9,9 +9,13 @@ name: Deploying dev-app to Firebase previews
 
 on:
   workflow_run:
-    workflows: [Build dev-app for deployment]
+    workflows: ['Build dev-app for deployment']
     types: [completed]
 
+permissions:
+  # Needed in order to be able to comment on the pull request.
+  pull-requests: write
+
 jobs:
   deploy-dev-app:
     runs-on: ubuntu-latest

.github/workflows/lock-closed.yml

@@ -5,6 +5,8 @@ on:
     # Run at 00:00 every day
     - cron: '0 0 * * *'
 
+permissions: read-all
+
 jobs:
   lock_closed:
     runs-on: ubuntu-latest