fix(ci): fix SonarCloud PR decoration not updating PRs (#4571)

- Upgrade download-artifact from v5 to v8
- Add pull-requests: write permission required for PR decoration comments

Author: devinea

.github/workflows/sonar.yml

@@ -11,6 +11,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     permissions:
       actions: read # Required to download artifacts
+      pull-requests: write # Required for PR decoration comments
     steps:
       - name: 'Checkout project'
         uses: actions/checkout@v6
@@ -21,7 +22,7 @@ jobs:
 
       - name: 'Download cached artifact'
         if: github.event_name == 'workflow_run'
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v8
         with:
           name: sonar-artifact
           run-id: ${{ github.event.workflow_run.id }}