feat: permissions (#168)

- Load `app-permissions` from schema exported by `@octokit/openapi`
- Update documentation in README.md
- Implement the `permissions_*` inputs in the action code

---------

Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>

package-lock.json

@@ -13,9 +13,10 @@
         "@octokit/auth-app": "^7.1.5",
         "@octokit/request": "^9.2.2",
         "p-retry": "^6.2.1",
-        "undici": "^7.4.0"
+        "undici": "^7.5.0"
       },
       "devDependencies": {
+        "@octokit/openapi": "^18.0.0",
         "@sinonjs/fake-timers": "^14.0.0",
         "ava": "^6.2.0",
         "c8": "^10.1.3",
@@ -773,6 +774,16 @@
         "node": ">= 18"
       }
     },
+    "node_modules/@octokit/openapi": {
+      "version": "18.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi/-/openapi-18.0.0.tgz",
+      "integrity": "sha512-N1khK+uLrWkyJ6J/kjYfhD4NnTsgU+xf1av6Ui9an5Z7Now5ZzUvUkKgymbmfGb+yjPHM/jQG2Ql4RWKw/AkpA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/@octokit/openapi-types": {
       "version": "23.0.1",
       "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-23.0.1.tgz",