Potential fix for code scanning alert no. 7: Workflow does not contain permissions

[tsundvoll]

Potential fix for https://github.com/equinor/isar/security/code-scanning/7

General approach:
Explicitly add a permissions block to the workflow. This can be applied at the top level (affecting all jobs), or per-job (to tailor permissions individually). Since all jobs here automate project and issue/PR management, the minimal required permissions are likely contents: read, issues: write, and pull-requests: write.

Detailed changes:

• Insert a permissions: block immediately after the name: or before the on: key, or at the start of the jobs: map.
• Recommended configuration for this workflow is:

  permissions:
    contents: read
    issues: write
    pull-requests: write

  This gives jobs read-only access to code and write access to issues and PRs, matching the automation tasks being performed.

Files/regions/lines to change:

• Only .github/workflows/project_automations.yml.
• Add the permissions: block right after the workflow name: and before on: to cover all jobs by default.

Requirements:

• No new methods, imports, or definitions are needed, as this is a YAML metadata change.

---

Suggested fixes powered by Copilot Autofix. Review carefully before merging.