.github/workflows: fix permissions
the merge actions comment on pull requests, seems this was broken by 2c71278a2395d6d8c4e06d1ebe4de1ffdae727c7
also:
- fix permissions on new manual rendering action
- drop unnecessary issues permission from the terraform action