Add 'watch services' permission to unprivileged example #2856

	name: Pull request checks

	on:
	push:
	branches: [ 'main', 'release-*' ]
	pull_request:
	branches: [ 'main', 'release-*' ]

	jobs:
	test:
	name: test
	runs-on: ubuntu-latest
	strategy:
	matrix:
	go: [ '1.23' ]
	steps:
	- uses: actions/checkout@v3
	# TODO:
	# - name: Check Drone.yml is up-to-date
	# uses: chrislennon/action-drone@v1
	# with:
	# version: 1.7.0
	# - run: make check-drone-drift
	# env:
	# DRONE_SERVER: ${{ secrets.DRONE_SERVER }}
	# DRONE_TOKEN: ${{ secrets.DRONE_TOKEN }}
	- name: Set up Go
	uses: actions/setup-go@v3
	with:
	go-version: ${{ matrix.go }}
	- name: Run verification and unit tests
	run: make verify cov-exclude-generated
	- name: Report coverage
	uses: codecov/codecov-action@v4
	env:
	CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
	with:
	file: ./testoutput/cover.txt
	flags: unittests

Provide feedback