Move fuzzing failure notification from reusable workflow to scheduled workflow

- Removed notification step and issues permission from dep_fuzzing.yml (reusable workflow)
- Added separate notify-failure job to Fuzzing.yml (scheduled workflow)
- This ensures issues are only created for scheduled cron job failures, not PR runs

Co-authored-by: jsturtevant <[email protected]>

Author: Copilot

.github/workflows/Fuzzing.yml

@@ -16,4 +16,17 @@ jobs:
     with:
       targets: '["fuzz_host_print", "fuzz_guest_call", "fuzz_host_call"]' # Pass as a JSON array
       max_total_time: 18000 # 5 hours in seconds
-    secrets: inherit
+    secrets: inherit
+
+  notify-failure:
+    runs-on: ubuntu-latest
+    needs: fuzzing
+    if: failure() && needs.fuzzing.result == 'failure'
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+        
+      - name: Notify Fuzzing Failure
+        run: ./dev/notify-fuzzing-failure.sh "fuzz_host_print,fuzz_guest_call,fuzz_host_call"
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/dep_fuzzing.yml

@@ -20,7 +20,6 @@ on:
 permissions:
   id-token: write
   contents: read
-  issues: write
 
 jobs:
   fuzz:
@@ -61,9 +60,3 @@ jobs:
         with:
           name: fuzz-crash-artifacts
           path: fuzz/artifacts/
-
-      - name: Notify Fuzzing Failure
-        if: failure() # Only run this step if the fuzzing job failed
-        run: ./dev/notify-fuzzing-failure.sh "${{ matrix.target }}"
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}