ci: drop permissions from cla workflow that are not accessiblle (#4045)

Author: Saadnajmi

.github/workflows/cla-auto-accept.yml

@@ -20,8 +20,7 @@ jobs:
         with:
           app-id: ${{ vars.APP_ID }}
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-          permission-pull-requests: read
-          permission-issues: write
+          permission-pull-requests: write
 
       - name: Accept CLA if bot-authored PR
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8