reduce permissions granted to the report job

Author: reubenmiller

.github/workflows/test.yaml

@@ -108,11 +108,12 @@ jobs:
 
   generate_report:
     name: Publish report
-    permissions: write-all
     if: ${{ always() && github.event_name == 'pull_request_target' }}
     continue-on-error: true
     needs: [test]
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
     - uses: actions/checkout@v4
     - name: Download reports