ci: grant config-sync job explicit permissions

[olantwin]

🤖 AI text below 🤖

Grants contents: write and pull-requests: write on the config-sync sync job so it can push the branch and open the sync PR explicitly, rather than relying on the ambient repo default token permissions. Matches the pattern used by the prek/commit-check callers. Pairs with ShipSoft/.github#20.

Summary by CodeRabbit

• Chores
  • Updated automated synchronization workflow permissions to enable repository content and pull request updates.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 6361f22b-8804-42e8-b9d6-46a7caa55f0a

📥 Commits

Reviewing files that changed from the base of the PR and between a042859 and 9450700.

📒 Files selected for processing (1)

• .github/workflows/update-shared-configs.yml

Included review availability: Your plan includes up to 1 review per rolling hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The shared configuration workflow now grants job-level write access to repository contents and pull requests.

Changes

Workflow permissions

Layer / File(s)	Summary
Grant workflow write permissions .github/workflows/update-shared-configs.yml	The workflow job declares write access for repository contents and pull requests.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 94507

This localized workflow change explicitly grants the config-sync job permission to push its branch and open the synchronization pull request; no actionable merge-blocking risk remains after normal checks.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the CI job and the explicit permission change described in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix-config-sync-permissions

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}