GH-35706: [CI] Set minimal permissions on pr_review_trigger.yml

[diogoteles08]

Closes #35706

• Closes: [CI] Set minimal permissions on pr_review_trigger.yml #35706

[github-actions]

• Closes: [CI] Set minimal permissions on pr_review_trigger.yml #35706

[github-actions]

⚠️ GitHub issue #35706 has been automatically assigned in GitHub to PR creator.

[assignUser]

Thanks, while pr_review is a restricted trigger (well for fork PRs which is all PRs for us) it makes sense to keep this consistent with the other workflows.

[raulcd]

Thanks!

[ursabot]

Benchmark runs are scheduled for baseline = dcdeab7 and contender = c4ea194. c4ea194 is a master commit associated with this PR. Results will be available as each benchmark for each run completes.
Conbench compare runs links:
[Finished ⬇️0.0% ⬆️0.0%] ec2-t3-xlarge-us-east-2
[Failed ⬇️0.0% ⬆️0.0%] test-mac-arm
[Failed ⬇️2.6% ⬆️0.0%] ursa-i9-9960x
[Failed ⬇️0.18% ⬆️0.09%] ursa-thinkcentre-m75q
Buildkite builds:
[Finished] c4ea194c ec2-t3-xlarge-us-east-2
[Failed] c4ea194c test-mac-arm
[Finished] c4ea194c ursa-i9-9960x
[Failed] c4ea194c ursa-thinkcentre-m75q
[Finished] dcdeab76 ec2-t3-xlarge-us-east-2
[Finished] dcdeab76 test-mac-arm
[Failed] dcdeab76 ursa-i9-9960x
[Finished] dcdeab76 ursa-thinkcentre-m75q
Supported benchmarks:
ec2-t3-xlarge-us-east-2: Supported benchmark langs: Python, R. Runs only benchmarks with cloud = True
test-mac-arm: Supported benchmark langs: C++, Python, R
ursa-i9-9960x: Supported benchmark langs: Python, R, JavaScript
ursa-thinkcentre-m75q: Supported benchmark langs: C++, Java

[ursabot]

['Python', 'R'] benchmarks have high level of regressions.
ursa-i9-9960x