Create the draft pull request for unstable version using a PAT token

[arnested]

Otherwise actions will not run on the new pull request.

Adjust the permissions for the autogenerated github.secrets token. Now
that we use a PAT token we don't need anything beside read permission.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 30.40%. Comparing base (9de3390) to head (acd25c5).
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #331   +/-   ##
=======================================
  Coverage   30.40%   30.40%           
=======================================
  Files           7        7           
  Lines         273      273           
=======================================
  Hits           83       83           
  Misses        188      188           
  Partials        2        2           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.