Add necessary permissions/tokens for "lewagon/wait-on-check-action" so it can run nightly (#30923)

old-commit-hash: 2a49f94872c03086e52c0318c93bdd0c1d4bcafd

.github/workflows/prebuilt.yaml

@@ -15,6 +15,8 @@ jobs:
     if: github.repository == 'commaai/openpilot'
     env:
       PUSH_IMAGE: true
+    permissions:
+      checks: read
     steps:
     - name: Wait for green check mark
       if: ${{ github.event_name != 'workflow_dispatch' }}
@@ -23,6 +25,7 @@ jobs:
         ref: master
         wait-interval: 30
         running-workflow-name: 'build prebuilt'
+        repo-token: ${{ secrets.GITHUB_TOKEN }}
         check-regexp: ^((?!.*(build master-ci).*).)*$
     - uses: actions/checkout@v4
       with: