Use environment secrets for Crowdin actions (#3753)

Author: Nateowami

.github/workflows/push-changes-to-crowdin.yml

@@ -18,6 +18,8 @@ jobs:
   push_files_to_crowdin:
     name: "Push files to Crowdin"
     runs-on: ubuntu-24.04
+    environment: Crowdin
+
     steps:
       - name: "Fail if not on master"
         if: github.ref != 'refs/heads/master'
@@ -42,5 +44,5 @@ jobs:
       - name: "Push files to Crowdin"
         run: scripts/push_changes_to_crowdin.mts
         env:
-          CROWDIN_PROJECT_ID: ${{ secrets.CROWDIN_PROJECT_ID }}
+          CROWDIN_PROJECT_ID: ${{ vars.CROWDIN_PROJECT_ID }}
           CROWDIN_API_KEY: ${{ secrets.CROWDIN_API_KEY }}

.github/workflows/update-localizations.yml

@@ -11,6 +11,7 @@ on:
 jobs:
   update-localizations:
     runs-on: ubuntu-latest
+    environment: Crowdin
 
     steps:
       - name: Checkout repository
@@ -27,7 +28,7 @@ jobs:
       - name: Run update_from_crowdin.mts
         run: scripts/update_from_crowdin.mts
         env:
-          CROWDIN_PROJECT_ID: ${{ secrets.CROWDIN_PROJECT_ID }}
+          CROWDIN_PROJECT_ID: ${{ vars.CROWDIN_PROJECT_ID }}
           CROWDIN_API_KEY: ${{ secrets.CROWDIN_API_KEY }}
 
       - name: Create Pull Request