Add more permissions to auto-merge workflow 🔓

Still trying to fix

```
GraphQL: Resource not accessible by integration (mergePullRequest)
```

See https://github.com/janraasch/hugo-bearblog/actions/runs/7624250504/job/20766236838

and https://github.com/cli/cli/discussions/7617

.github/workflows/auto-merge.yml

@@ -7,6 +7,7 @@ on:
 
 permissions:
   issues: write
+  contents: write
   pull-requests: write
 
 jobs:
@@ -21,9 +22,7 @@ jobs:
           github-token: '${{ secrets.GITHUB_TOKEN }}'
       - name: Enable auto-merge for Dependabot PRs
         if: contains(fromJSON('["version-update:semver-patch", "version-update:semver-minor"]'), steps.dependabot-metadata.outputs.update-type)
-        run: |
-          gh pr review --approve "$PR_URL"
-          gh pr merge --auto --squash "$PR_URL"
+        run: gh pr merge --auto --squash "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}