FixPR.yml had no permissions block, so GITHUB_TOKEN got the repo default. It commits Cargo.lock back to main, so scope it to contents: write only. Mirrors the hardening accepted in #12655.