chore(ci): add perms

.github/workflows/labeler.yml

@@ -1,13 +1,15 @@
 name: 'Pull Request Labeler'
+
 on:
   pull_request:
     types: [opened, labeled, unlabeled]
 
-jobs:
-  triage:
 permissions:
       contents: read
       pull-requests: write
+
+jobs:
+  triage:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository