Detect GITHUB_TOKEN permissions and provide helpful error if underprivileged

[joshspicer]

We could potentially detect the permissions of the GITHUB_TOKEN within the action and provide a better error message, but at the end of the day I think the user still needs to add these into their workflow.

Feedback ref: #219 (comment)