Refine scopes

Signed-off-by: Rob Winch <[email protected]>

Author: rwinch

.github/workflows/merge-dependabot-pr.yml

@@ -4,7 +4,9 @@ on: pull_request_target
 
 run-name: Merge Dependabot PR ${{ github.ref_name }}
 
-permissions: write-all
+permissions:
+  pull-requests: write
+  contents: write
 
 jobs:
   merge-dependabot-pr: