Add CI permissions to push to the repository

Author: Kobzol

.github/workflows/ci.yml

@@ -12,10 +12,6 @@ on:
   schedule:
     - cron: '44 4 * * *' # At 4:44 UTC every day.
 
-permissions:
-  contents: read
-  pull-requests: write
-
 defaults:
   run:
     shell: bash
@@ -91,6 +87,9 @@ jobs:
   cron-fail-notify:
     name: cronjob failure notification
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     needs: [build, style]
     if: github.event_name == 'schedule' && failure()
     steps: