Rewrite the upstream syncup job [1]

Author: jbachorik

.github/workflows/dd-sync.yml

@@ -7,6 +7,7 @@ on:
 permissions:           # minimum perms the job needs
   contents: write      # push the sync branch
   pull-requests: write # open, approve & merge the PR
+  actions: write       # update workflow files
 
 concurrency:           # never let two syncs race
   group: ${{ github.workflow }}-${{ github.ref }}