fix: renovate needs permission to spawn ci in prs it opens

.github/workflows/renovate.yaml

@@ -6,6 +6,7 @@ on:
     - cron: '0 * * * *'
 
 permissions:
+  actions: write
   contents: write
   issues: write
   pull-requests: write