add ghost permissions to package.json

I was testing this out with the latest Ghost code and I found that permissions were necessary to activate it.
From what I can tell, the exact format of these permissions hasn't actually been fleshed out, but at least this keeps the example working in the meantime.