ci: Specify permissions for CI (#4338)

Co-authored-by: Link <link20050703@gmail.com>

.github/workflows/stale.yml

@@ -4,7 +4,9 @@
 # For more information, see:
 # https://github.com/actions/stale
 name: Mark stale issues and pull requests
-
+permissions:
+  issues: write
+  pull-requests: write
 on:
   schedule:
     - cron: '0 0 * * 1'
@@ -12,10 +14,6 @@ on:
 jobs:
   stale:
     runs-on: ubuntu-latest
-    permissions:
-      issues: write
-      pull-requests: write
-
     steps:
       - uses: actions/stale@v9
         with: