Add pull-requests: read permission to staging-lint-checks workflow

[Copilot]

When a workflow declares explicit permissions, all unspecified scopes default to none. The staging-lint-checks workflow only declared contents: read, causing GITHUB_TOKEN to lack pull-requests: read — leading to 403 failures when the embedded script calls github.rest.pulls.listFiles to detect rule changes.

Changes

• .github/workflows/staging-lint-checks.yaml: Add pull-requests: read to the top-level permissions block

permissions:
  contents: read
  pull-requests: read  # required for github.rest.pulls.listFiles

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.