fix: dependency-graph permissions (#1372)

apparently permissions must be at the job level, not the
step level.

Follow-up on #1371

.github/workflows/dependency-graph.yml

@@ -10,10 +10,10 @@ jobs:
   dependency-graph:
     name: Update Dependency Graph
     runs-on: ubuntu-latest
+    permissions:
+      # The API requires write permission on the repository
+      # to submit dependencies
+      contents: write
     steps:
       - uses: actions/checkout@v4
       - uses: scalacenter/sbt-dependency-submission@v2
-        permissions:
-          # The API requires write permission on the repository
-          # to submit dependencies
-          contents: write