Finetune workflows permissions

Author: gnbm

.github/workflows/nightly.yml

@@ -34,6 +34,7 @@ jobs:
       contents: read
       id-token: write
     uses: ./.github/workflows/release-ionic.yml
+    secrets: inherit
     with:
       tag: nightly
       version: ${{ needs.create-nightly-hash.outputs.nightly-hash }}

.github/workflows/release-orchestrator.yml

@@ -55,16 +55,25 @@ permissions:
 jobs:
   run-nightly:
     if: ${{ github.event_name == 'schedule' || (github.event_name == 'workflow_dispatch' && inputs.release-type == 'nightly') }}
+    permissions:
+      contents: read
+      id-token: write
     uses: ./.github/workflows/nightly.yml
     secrets: inherit
 
   run-dev:
     if: ${{ github.event_name == 'workflow_dispatch' && inputs.release-type == 'dev' }}
+    permissions:
+      contents: read
+      id-token: write
     uses: ./.github/workflows/dev-build.yml
     secrets: inherit
 
   run-production:
     if: ${{ github.event_name == 'workflow_dispatch' && inputs.release-type == 'production' }}
+    permissions:
+      contents: read
+      id-token: write
     uses: ./.github/workflows/release.yml
     secrets: inherit
     with: