Fix deep-research trigger: grant pull-requests: write

[strawgate]

Summary

• The reusable workflow gh-aw-deep-research.lock.yml has activation and pre_activation jobs that request pull-requests: write
• The trigger workflow only granted pull-requests: read, causing the workflow validation error:

  The nested job 'activation' is requesting 'pull-requests: write', but is only allowed 'pull-requests: read'

• Updated both the example and dogfood trigger to grant pull-requests: write

Test plan

• Verify the trigger-deep-research workflow passes GitHub Actions validation
• Test /research command on an issue

🤖 Generated with Claude Code

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 4f7b830 and 842f12d.

📒 Files selected for processing (2)

• .github/workflows/trigger-deep-research.yml
• gh-agent-workflows/deep-research/example.yml

---

📝 Walkthrough

Walkthrough

Two GitHub Actions workflow configuration files are updated to elevate pull-requests permission from read to write. The changes affect .github/workflows/trigger-deep-research.yml and gh-agent-workflows/deep-research/example.yml. Both modifications are permission-scope-only adjustments with no alterations to workflow logic or control flow.

Possibly related PRs

• Add Deep Research workflow scaffold #352: Introduces identical pull-requests permission scope changes (read to write) in the same workflow files.
• Add dependency-review workflow for Dependabot/Renovate PR analysis #429: Modifies pull-requests permission to write across GitHub Actions workflow YAML files.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch fix/deep-research-pr-permissions

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}