Add permissions and in-line PR comment option to opengrep.yml (#21)

Author: keeravani

.github/workflows/opengrep.yml

@@ -6,6 +6,7 @@ on:
 
 permissions:
   contents: read
+  pull-requests: write
 
 # Do NOT use cancel-in-progress — it breaks required workflow checks.
 
@@ -16,3 +17,5 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: temporalio/public-actions/sast/opengrep@main
+        with:
+          pr-comments: 'true'