ci: restrict permissions for on-failure job (@MohakGupta2004)

[MohakGupta2004]

Description

ci: restrict permissions for the on-failure job to enhance security

The on-failure job previously used permissions: write-all, granting overly permissive access. This commit updates the workflow to specify granular permissions (e.g., contents: read, pull-requests: write), adhering to the principle of least privilege and improving security.

Checks

• Adding quotes?
  • Make sure to include translations for the quotes in the description (or another comment) so we can verify their content.
• Adding a language or a theme?
  • If is a language, did you edit _list.json, _groups.json and add languages.json?
  • If is a theme, did you add the theme.css?
    • Also please add a screenshot of the theme, it would be extra awesome if you do so!
• Check if any open issues are related to this PR; if so, be sure to tag them below.
• Make sure the PR title follows the Conventional Commits standard. (https://www.conventionalcommits.org for more info)
• Make sure to include your GitHub username prefixed with @ inside parentheses at the end of the PR title.

Closes #

[MohakGupta2004]

@Miodec

[Miodec]

Trigger a build failure so we can test this (add something that will break to the frontend or backend).

[github-actions]

This PR is stale. Please trigger a re-run of the PR check action.