fix: add checks permission for Renovate

[iwamot]

Summary

• Add permission-checks: write to match the GitHub App configuration
• Ensures all App permissions are properly requested in the token

🤖 Generated with Claude Code

[github-actions]

Dependency Review

✅ No vulnerabilities found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 61a9f42.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

None

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 50.96%. Comparing base (ba023d4) to head (61a9f42).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1064   +/-   ##
=======================================
  Coverage   50.96%   50.96%           
=======================================
  Files          26       26           
  Lines        1244     1244           
  Branches      178      178           
=======================================
  Hits          634      634           
  Misses        606      606           
  Partials        4        4           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.