Fix use of * for permissions request on token auth
Fix use of * for permissions request on token auth

GitLab and potentially other registries may not handle "*" properly as
the requested permissions; explicitly ask for "push" and "pull"

Signed-off-by: Phil Estes <dbac1f450dc8326caa7ba104b384a0eca642250c@gmail.com>

estesp/manifest-tool,estesp/manifest-tool