sync-branches permissions issue

[mrjf]

github/gh-aw#24345

sync-branches performs git push to update autoloop/* branches, but the workflow only requests read-all permissions. With read-only GITHUB_TOKEN permissions, pushes will be rejected. Update the workflow permissions to grant contents: write (and ideally scope to the minimum required).