fix: notify convstack

Author: docimin

.github/workflows/notify-convstack.yml

@@ -1,4 +1,6 @@
 name: Notify ConvStack
+permissions:
+  contents: read
 
 on:
   push:
@@ -14,4 +16,4 @@ jobs:
           token: ${{ secrets.CONVSTACK_PAT }}
           repository: convstack/convstack
           event-type: submodule-update
-          client-payload: '{"repo": "dashboard", "ref": "${{ github.sha }}"}'
+          client-payload: '{"repo": "dashboard", "ref": "${{ github.sha }}"}'