ci: fix permissions issue with approved-label (#3017)

ci: fix permissions issue with approved-label (#3017) #137