Fix upgrade-provider token permissions (#1715)

Fixes pulumi/pulumi-xyz#1293.
Refs #1481.

Author: blampe

provider-ci/internal/pkg/templates/bridged/.github/workflows/upgrade-provider.yml

@@ -32,6 +32,7 @@ jobs:
   upgrade_provider:
     name: upgrade-provider
     runs-on: #{{ .Config.Runner.Default }}#
+    permissions: write-all
     steps:
       #{{- if .Config.FreeDiskSpaceBeforeBuild }}#
       # Run as first step so we don't delete things that have just been installed

provider-ci/test-providers/acme/.github/workflows/upgrade-provider.yml

@@ -31,6 +31,7 @@ jobs:
   upgrade_provider:
     name: upgrade-provider
     runs-on: ubuntu-latest
+    permissions: write-all
     steps:
       - name: Checkout Repo
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

provider-ci/test-providers/aws/.github/workflows/upgrade-provider.yml

@@ -31,6 +31,7 @@ jobs:
   upgrade_provider:
     name: upgrade-provider
     runs-on: ubuntu-latest
+    permissions: write-all
     steps:
       # Run as first step so we don't delete things that have just been installed
       - name: Free Disk Space (Ubuntu)

provider-ci/test-providers/docker/.github/workflows/upgrade-provider.yml

@@ -31,6 +31,7 @@ jobs:
   upgrade_provider:
     name: upgrade-provider
     runs-on: ubuntu-latest
+    permissions: write-all
     steps:
       - name: Checkout Repo
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

provider-ci/test-providers/xyz/.github/workflows/upgrade-provider.yml

@@ -31,6 +31,7 @@ jobs:
   upgrade_provider:
     name: upgrade-provider
     runs-on: ubuntu-latest
+    permissions: write-all
     steps:
       - name: Checkout Repo
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0