Enable permissions to create a PR

Author: lcartey

.github/workflows/update-codeql.yml

@@ -6,6 +6,10 @@ on:
     schedule:
       - cron: '30 0 * * *'
 
+permissions:
+    contents: write
+    pull-requests: write
+
 jobs:
     update-codeql:
         name: Update CodeQL CLI dependencies