Define `permissions` in workflows and update actions