ci: fix permissions for GITHUB_TOKEN on dependabot workflows (#22547)

.github/workflows/dependabot-update-all.yml

@@ -2,6 +2,7 @@ name: Dependabot Update All Go Modules
 on: pull_request
 
 permissions:
+  contents: write
   pull-requests: write
 
 env:
@@ -16,8 +17,6 @@ jobs:
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           ref: ${{ github.event.pull_request.head.ref }}
-          # Secret to be added in the repo under Settings > Secrets > Dependabot
-          token: ${{ secrets.PRBOT_PAT }}
       - uses: actions/setup-go@v5
         with:
           go-version: "1.23"

.github/workflows/test.yml

@@ -7,7 +7,8 @@ on:
       - main
 
 permissions:
-  contents: read
+  contents: write
+  pull-requests: write
 
 concurrency:
   group: ci-${{ github.ref }}-tests