fix(CICD): revert workflow permissions from 'checks' to 'pull-requests'

[lukeroantreeONS]

📌 Pull Request Template

Please complete all sections

✨ Summary

📜 Changes Introduced

• Feature implementation (feat:) / bug fix (fix:) / refactoring (chore:) / documentation (docs:) / testing (test:)
• Updates to tests and/or documentation
• Terraform changes (if applicable)

✅ Checklist

Please confirm you've completed these checks before requesting a review.

• Code passes linting with Ruff
• Security checks pass using Bandit
• API and Unit tests are written and pass using pytest
• Terraform files (if applicable) follow best practices and have been validated (terraform fmt & terraform validate)
• DocStrings follow Google-style and are added as per Pylint recommendations
• Documentation has been updated if needed

🔍 How to Test

[rileyok-ons]

Should be good, lets go!