[chore] update permissions for add-labels workflow (#12429)

Reduce the scope of permissions given to the github token

Signed-off-by: Alex Boten <[email protected]>

Author: codeboten

.github/workflows/add-labels.yml

@@ -3,9 +3,13 @@ on:
   issue_comment:
     types: [created]
 
+permissions: read-all
+
 jobs:
   add-labels:
     if: ${{ !github.event.issue.pull_request && startsWith(github.event.comment.body, '/label') && github.repository_owner == 'open-telemetry' }}
+    permissions:
+      issues: write
 
     runs-on: ubuntu-24.04
     steps: