CI: Subs Workflow can read PAT

.github/workflows/stubs.yml

@@ -23,6 +23,8 @@ jobs:
       # Give the default GITHUB_TOKEN write permission to commit and push the
       # changed files back to the repository.
       contents: write
+      # For the person access token (PAT) to push back changes.
+      secrets: read
 
     steps:
     - uses: actions/checkout@v3