batches: request the workflow scope for GitHub user credentials

Created by: LawnGnome

We have recently discovered that you need workflow to be able to push changes that touch files in .github, so let's go ahead and request that as part of the standard set of GitHub scopes. (We should also explain why in the docs.)