fix: scope app token permissions and fix prettier formatting

Adds permission-contents and permission-pull-requests inputs to the
create-github-app-token step to limit the minted token's scope (fixes
zizmor github-app finding). Also converts single-quoted app-id value to
double quotes to satisfy prettier.

Author: jpr5

.github/workflows/fix-drift.yml

@@ -32,8 +32,10 @@ jobs:
         id: app-token
         uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
-          app-id: '1108748'
+          app-id: "1108748"
           private-key: ${{ secrets.DEVOPS_BOT_PRIVATE_KEY }}
+          permission-contents: write
+          permission-pull-requests: write
       - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with: