Merge pull request #23 from mithro/permissions

Use more restrictive permissions on the GitHub token.