command-action: added scoped permissions to the github tokens (#5016)
This will ensure that malicious code can not access other parts of the project. Co-authored-by: Oliver Tale-Yazdi <[email protected]> Co-authored-by: Bastian Köcher <[email protected]>