Add secret into get_app_metadata workflow

Author: cdegouvion-ledger

.github/workflows/_get_app_metadata.yml

@@ -2,6 +2,10 @@ name: Output metadata on the application, inferred from the local 'ledger_app.to
 
 on:
   workflow_call:
+    secrets:
+      token:
+        description: 'A token passed from the caller workflow'
+        required: false
     inputs:
       app_repository:
         description: 'The GIT repository to build (defaults to `github.repository`)'
@@ -65,6 +69,7 @@ jobs:
           repository: ${{ inputs.app_repository }}
           ref: ${{ inputs.app_branch_name }}
           submodules: recursive
+          token: ${{ secrets.token && secrets.token || github.token }}
 
       - name: Install dependencies
         run: pip install ledgered

.github/workflows/reusable_build.yml

@@ -62,11 +62,6 @@ on:
         required: false
         default: ""
         type: string
-      token:
-        description: 'Optional token for authentication'
-        required: false
-        default: ${{ github.token }}
-        type: string
 
 jobs:
   call_get_app_metadata:
@@ -79,6 +74,8 @@ jobs:
       app_repository: ${{ inputs.app_repository }}
       app_branch_name: ${{ inputs.app_branch_name }}
       compatible_devices: ${{ inputs.run_for_devices }}
+    secrets:
+      token: ${{ secrets.token }}
 
   build:
     name: Build application for NanoS, X, S+, and Stax
@@ -98,7 +95,7 @@ jobs:
           repository: ${{ inputs.app_repository }}
           ref: ${{ inputs.app_branch_name }}
           submodules: recursive
-          token: ${{ secrets.token }}
+          token: ${{ secrets.token && secrets.token || github.token }}
 
       - name: Build application
         id: "build"