fix: add explicit permissions to auto-close workflow (#893)

- Add permissions block with minimal required permissions
- Resolves CodeQL security issue actions/missing-workflow-permissions
- Follows principle of least privilege with contents:read, issues:write, pull-requests:write

🤖 Assisted by Amazon Q Developer