fix(ci): estate-wide structural CI fixes

- grant secret-scanner reusable its requested job permissions
- drop invalid timeout-minutes on reusable-call jobs
- drop hashFiles() from job-level if: expressions

Author: hyperpolymath

.github/workflows/rust-ci.yml

@@ -16,7 +16,6 @@ jobs:
     name: Cargo check + clippy + fmt
     runs-on: ubuntu-latest
     timeout-minutes: 15
-    if: hashFiles('Cargo.toml') != ''
     steps:
       - name: Checkout repository
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
@@ -37,7 +36,6 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     needs: check
-    if: hashFiles('Cargo.toml') != ''
     steps:
       - name: Checkout repository
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4