fix(github-123): restore required job-level permissions for workflow correctness

Author: DerekRoberts

.github/workflows/merge.yml

@@ -49,8 +49,6 @@ jobs:
           tags: |
             ${{ needs.semantic-version.outputs.semanticVersion }}
             ${{ needs.semantic-version.outputs.tag }}
-permissions: {}
-
   deploys:
     name: TEST Deployments
     needs: [retag-images, semantic-version]

.github/workflows/pr-close.yml

@@ -13,6 +13,8 @@ jobs:
   cleanup:
     name: Cleanup and Image Promotion
     uses: bcgov/quickstart-openshift-helpers/.github/workflows/.pr-close.yml@6d695dd755fa9255ea4bde335890516beb6f95e4 # v1.0.1
+    permissions:
+      packages: write
     permissions:
       packages: write
     secrets:

.github/workflows/pr-open.yml

@@ -16,6 +16,8 @@ jobs:
       DOMAIN: apps.silver.devops.gov.bc.ca
       PREFIX: ${{ github.event.repository.name }}-${{ github.event.number }}
     runs-on: ubuntu-24.04
+    permissions:
+      pull-requests: write
     permissions:
       pull-requests: write
     steps:
@@ -38,6 +40,10 @@ jobs:
   builds:
     name: Builds
     runs-on: ubuntu-24.04
+    permissions:
+      attestations: write
+      id-token: write
+      packages: write
     permissions:
       attestations: write
       id-token: write