GH-48780: [CI] Add missing permissions for reusable workflow calls

[HyukjinKwon]

Rationale for this change

Workflows cpp_extra.yml, r_extra.yml and package_linux.yml call reusable workflows (check_labels.yml and report_ci.yml) that require specific permissions. When #48771 added explicit permissions to these reusable workflows, the calling workflows were not updated to give those permissions.

This caused startup_failure errors when these workflows were triggered on pull requests. Here are example failures: https://github.com/apache/arrow/actions/runs/20809257825 and https://github.com/apache/arrow/actions/runs/20803198596

What changes are included in this PR?

Added missing permissions to the workflows

Are these changes tested?

Yes, I tested them within this PR.

Are there any user-facing changes?

No, dev-only.

• GitHub Issue: [CI] Add missing permissions for reusable workflow calls #48780

[github-actions]

Thanks for opening a pull request!

If this is not a minor PR. Could you open an issue for this pull request on GitHub? https://github.com/apache/arrow/issues/new/choose

Opening GitHub issues ahead of time contributes to the Openness of the Apache Arrow project.

Then could you also rename the pull request title in the following format?

GH-${GITHUB_ISSUE_ID}: [${COMPONENT}] ${SUMMARY}

or

MINOR: [${COMPONENT}] ${SUMMARY}

See also:

• Other pull requests
• Contribution Guidelines - Contributing Overview

[HyukjinKwon]

This was my bad, @kou. I had to check here https://github.com/apache/arrow/actions/workflows/cpp_extra.yml. This should fix the issues.

[kou]

Could you open a separated issue?
Some our tools such as release scripts assume one issue per pull request.

[HyukjinKwon]

Sure I will do

[github-actions]

⚠️ GitHub issue #48780 has been automatically assigned in GitHub to PR creator.

[raulcd]

Oops, I've just merged a new PR adding a new workflow that uses the reusable workflows for the R Extra jobs, do you want to rebase and add those permissions there too?
https://github.com/apache/arrow/blob/076052300b8cc76d40ab20e04d23a913e7657473/.github/workflows/r_extra.yml

[HyukjinKwon]

Let me check!!

[HyukjinKwon]

tested in https://github.com/apache/arrow/actions/runs/20810917853 and made the changes accordingly!

and also updated PR description

[raulcd]

Thanks @HyukjinKwon

[conbench-apache-arrow]

After merging your PR, Conbench analyzed the 3 benchmarking runs that have been run so far on merge-commit fe5e0e5.

There weren't enough matching historic benchmark results to make a call on whether there were regressions.

The full Conbench report has more details.