Update workflows with needed permissions (#5003)

.github/workflows/auto_labeler_issues.yml

@@ -3,6 +3,9 @@ on:
   issues:
     types: [opened]
 
+permissions:
+  issues: write
+
 jobs:
   build:
 

.github/workflows/auto_labeler_pr.yml

@@ -2,6 +2,9 @@ name: Auto Labeler - PRs
 on:
   pull_request_target:
 
+permissions:
+  pull-requests: write
+
 jobs:
   build:
     runs-on: ubuntu-latest

.github/workflows/prepare_release.yml

@@ -7,6 +7,10 @@ on:
         required: false
         default: 'auto'
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   crowdin_download_translations:
     needs: pr_stable_bump

.github/workflows/publish_release.yml

@@ -29,6 +29,9 @@ jobs:
           twine upload dist/*
 
   pr_dev_bump:
+    permissions:
+      contents: write
+      pull-requests: write
     needs: release_to_pypi
     runs-on: ubuntu-latest
     steps: