Although the permission to modify PRs is granted to the entire workflow, the job still reports that it does not the permission to do so:
GITHUB_TOKEN Permissions
Contents: read
Metadata: read
PullRequests: read
This adds the permission to the job directly