Move permissions to job definition for update

Author: electrocucaracha

.github/workflows/update.yml

@@ -12,12 +12,11 @@ on:
   schedule:
     - cron: "0 0 * * *"
   workflow_dispatch:
-permissions: read-all
+permissions:
+  contents: write # for technote-space/create-pr-action to push code
+  pull-requests: write # for technote-space/create-pr-action to create a PR
 jobs:
   check-versions:
-    permissions:
-      contents: write # for technote-space/create-pr-action to push code
-      pull-requests: write # for technote-space/create-pr-action to create a PR
     runs-on: vm-self-hosted
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
@@ -57,9 +56,6 @@ jobs:
           PR_TITLE: "chore: update dictionary"
   check-github-actions:
     runs-on: ubuntu-latest
-    permissions:
-      contents: write # for technote-space/create-pr-action to push code
-      pull-requests: write # for technote-space/create-pr-action to create a PR
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
       - uses: technote-space/create-pr-action@91114507cf92349bec0a9a501c2edf1635427bc5 # 2.1.4