ci: give permissions to dependabot PRs to write to the repo