need to specify permissions

[derekmisler]

Related Issues

Closes: https://github.com/docker/gordon/issues/387

Summary

GitHub excludes the workflows permission from App installation tokens by default, even when the App itself has that permission granted. This PR explicitly passes all required permissions when requesting the installation token in src/app-token.ts, ensuring the generated token includes workflows: write along with every other permission the App has.

Permissions requested

Scope	Level	Type
actions	write	Repository
checks	write	Repository
contents	write	Repository
issues	write	Repository
pull_requests	write	Repository
statuses	write	Repository
variables	read	Repository
workflows	write	Repository
members	read	Organization

Note

Passing permissions explicitly scopes the token down to only what's listed, so all App permissions must be included to avoid accidentally dropping any.

---

Tip

Comment /review to trigger the PR Reviewer agent for automated feedback.
Comment /describe to generate a PR description.