Fix permissions and triggers for the dependabot auto merge.
Fix permissions and triggers for the dependabot auto merge.

We now have the correct permissions to reduce the surface of the token.

google/mtail,google/mtail