docs: update actions and workflows documentation

[skip ci]

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: hoverkraft-bot[bot]

.github/workflows/clean-deploy-argocd-app-of-apps.md

@@ -64,7 +64,9 @@ permissions: {}
 jobs:
   clean-deploy-argocd-app-of-apps:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/clean-deploy-argocd-app-of-apps.yml@2c8e24b416226074aea1e240468f043edefc5760 # 0.23.2
-    permissions: {}
+    permissions:
+      contents: read
+      pull-requests: write
     secrets:
       # GitHub token for creating and merging pull request (permissions contents: write and pull-requests: write, workflows: write).
       # See https://github.com/hoverkraft-tech/ci-github-common/blob/main/actions/create-and-merge-pull-request/README.md.

.github/workflows/clean-deploy.md

@@ -63,7 +63,11 @@ permissions: {}
 jobs:
   clean-deploy:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/clean-deploy.yml@2c8e24b416226074aea1e240468f043edefc5760 # 0.23.2
-    permissions: {}
+    permissions:
+      actions: read
+      deployments: write
+      issues: write
+      pull-requests: write
     secrets:
       # GitHub token for deploying.
       # Permissions:

.github/workflows/deploy-argocd-app-of-apps.md

@@ -85,7 +85,9 @@ permissions: {}
 jobs:
   deploy-argocd-app-of-apps:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-argocd-app-of-apps.yml@2c8e24b416226074aea1e240468f043edefc5760 # 0.23.2
-    permissions: {}
+    permissions:
+      contents: read
+      pull-requests: write
     secrets:
       # GitHub token for creating and merging pull request (permissions contents: write and pull-requests: write, workflows: write).
       # See https://github.com/hoverkraft-tech/ci-github-common/blob/main/actions/create-and-merge-pull-request/README.md.

.github/workflows/deploy-chart.md

@@ -87,7 +87,14 @@ permissions: {}
 jobs:
   deploy-chart:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-chart.yml@2c8e24b416226074aea1e240468f043edefc5760 # 0.23.2
-    permissions: {}
+    permissions:
+      actions: read
+      contents: read
+      deployments: write
+      id-token: write
+      issues: write
+      packages: write
+      pull-requests: write
     secrets:
       # OCI registry password.
       # This input is required.

.github/workflows/finish-deploy-argocd-app-of-apps.md

@@ -71,7 +71,12 @@ permissions: {}
 jobs:
   finish-deploy-argocd-app-of-apps:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/finish-deploy-argocd-app-of-apps.yml@2c8e24b416226074aea1e240468f043edefc5760 # 0.23.2
-    permissions: {}
+    permissions:
+      actions: read
+      contents: read
+      deployments: write
+      issues: write
+      pull-requests: write
     secrets:
       # GitHub Token to update the deployment.
       # Permissions:

.github/workflows/prepare-release.md

@@ -52,7 +52,9 @@ permissions: {}
 jobs:
   prepare-release:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml@2c8e24b416226074aea1e240468f043edefc5760 # 0.23.2
-    permissions: {}
+    permissions:
+      contents: read
+      pull-requests: write
     secrets:
       # GitHub token with following permissions:
       #