mesh-2092: move write permissions to job level

Author: james-bradley-nhs

.github/workflows/dependabot-auto-merge.yaml

@@ -9,15 +9,14 @@ on:
       - ready_for_review
       - labeled
 
-permissions:
-  contents: write
-  pull-requests: write
-
 jobs:
   dependabot-make-update:
     # Only run on Dependabot PRs
     if: github.event.pull_request.user.login == 'dependabot[bot]'
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
 
     steps:
       - name: Checkout
@@ -47,6 +46,9 @@ jobs:
     if: github.event.pull_request.user.login == 'dependabot[bot]'
     needs: dependabot-make-update
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
 
     steps:
       - name: Fetch Dependabot metadata