docs: update actions and workflows documentation

[skip ci]

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: hoverkraft-bot[bot]

.github/workflows/clean-deploy-argocd-app-of-apps.md

@@ -61,13 +61,11 @@ on:
   push:
     branches:
       - main
-permissions:
-  contents: read
-  pull-requests: write
-  id-token: write
+permissions: {}
 jobs:
   clean-deploy-argocd-app-of-apps:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/clean-deploy-argocd-app-of-apps.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
+    permissions: {}
     secrets:
       # GitHub token for creating and merging pull request (permissions contents: write and pull-requests: write, workflows: write).
       # See https://github.com/hoverkraft-tech/ci-github-common/blob/main/actions/create-and-merge-pull-request/README.md.

.github/workflows/clean-deploy.md

@@ -62,17 +62,18 @@ on:
   push:
     branches:
       - main
-permissions:
-  contents: write
-  issues: write
-  packages: write
-  pull-requests: write
-  actions: read
-  deployments: write
-  id-token: write
+permissions: {}
 jobs:
   clean-deploy:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/clean-deploy.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
+    permissions:
+      contents: write
+      issues: write
+      packages: write
+      pull-requests: write
+      actions: read
+      deployments: write
+      id-token: write
     secrets:
       # GitHub token for deploying.
       # Permissions:

.github/workflows/deploy-argocd-app-of-apps.md

@@ -82,13 +82,11 @@ on:
   push:
     branches:
       - main
-permissions:
-  contents: read
-  pull-requests: write
-  id-token: write
+permissions: {}
 jobs:
   deploy-argocd-app-of-apps:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-argocd-app-of-apps.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
+    permissions: {}
     secrets:
       # GitHub token for creating and merging pull request (permissions contents: write and pull-requests: write, workflows: write).
       # See https://github.com/hoverkraft-tech/ci-github-common/blob/main/actions/create-and-merge-pull-request/README.md.

.github/workflows/deploy-chart.md

@@ -83,17 +83,18 @@ on:
   push:
     branches:
       - main
-permissions:
-  actions: read
-  contents: write
-  deployments: write
-  issues: write
-  packages: write
-  pull-requests: write
-  id-token: write
+permissions: {}
 jobs:
   deploy-chart:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-chart.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
+    permissions:
+      actions: read
+      contents: write
+      deployments: write
+      issues: write
+      packages: write
+      pull-requests: write
+      id-token: write
     secrets:
       # OCI registry password.
       # This input is required.

.github/workflows/deploy-checks.md

@@ -48,12 +48,13 @@ on:
   push:
     branches:
       - main
-permissions:
-  contents: read
-  id-token: write
+permissions: {}
 jobs:
   deploy-checks:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-checks.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
+    permissions:
+      contents: read
+      id-token: write
     with:
       # JSON array of runner(s) to use.
       # See https://docs.github.com/en/actions/using-jobs/choosing-the-runner-for-a-job.

.github/workflows/deploy-finish.md

@@ -59,16 +59,17 @@ on:
   push:
     branches:
       - main
-permissions:
-  contents: read
-  issues: read
-  pull-requests: write
-  actions: read
-  deployments: write
-  id-token: write
+permissions: {}
 jobs:
   deploy-finish:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-finish.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
+    permissions:
+      contents: read
+      issues: read
+      pull-requests: write
+      actions: read
+      deployments: write
+      id-token: write
     with:
       # JSON array of runner(s) to use.
       # See https://docs.github.com/en/actions/using-jobs/choosing-the-runner-for-a-job.

.github/workflows/deploy-start.md

@@ -65,15 +65,16 @@ on:
   push:
     branches:
       - main
-permissions:
-  actions: read
-  deployments: write
-  issues: write
-  pull-requests: write
-  id-token: write
+permissions: {}
 jobs:
   deploy-start:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-start.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
+    permissions:
+      actions: read
+      deployments: write
+      issues: write
+      pull-requests: write
+      id-token: write
     with:
       # JSON array of runner(s) to use.
       # See https://docs.github.com/en/actions/using-jobs/choosing-the-runner-for-a-job.

.github/workflows/finish-deploy-argocd-app-of-apps.md

@@ -64,12 +64,11 @@ on:
   push:
     branches:
       - main
-permissions:
-  contents: read
-  id-token: write
+permissions: {}
 jobs:
   finish-deploy-argocd-app-of-apps:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/finish-deploy-argocd-app-of-apps.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
+    permissions: {}
     secrets:
       # GitHub Token to update the deployment.
       # Permissions:

.github/workflows/prepare-release.md

@@ -49,12 +49,13 @@ on:
   push:
     branches:
       - main
-permissions:
-  contents: read
-  pull-requests: write
+permissions: {}
 jobs:
   prepare-release:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
+    permissions:
+      contents: read
+      pull-requests: write
     secrets:
       # GitHub token with permissions `contents: write`, `pull-requests: write`.
       github-token: ""

.github/workflows/release-actions.md

@@ -54,11 +54,12 @@ on:
   push:
     branches:
       - main
-permissions:
-  contents: read
+permissions: {}
 jobs:
   release-actions:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
+    permissions:
+      contents: read
     secrets:
       # GitHub token for creating and merging pull request (permissions contents: write and pull-requests: write, workflows: write).
       # See https://github.com/hoverkraft-tech/ci-github-common/blob/main/actions/create-and-merge-pull-request/README.md.