ci(trunk): refresh caller workflow

Update the Trunk caller workflow to the refreshed organization reusable workflow shape.

Add explicit permissions, concurrency, and no-progress arguments.

Part of z-shell/.github#408.

Verification:
- Trunk Code Quality workflow passed on PR

Author: ss-o

.github/workflows/trunk-check.yml

@@ -1,14 +1,28 @@
 ---
-name: "⭕ Trunk"
+name: Trunk Code Quality
+
 on:
   push:
     branches: [main]
     tags: ["v*.*.*"]
   pull_request:
-    types: [opened, synchronize]
+    types: [opened, synchronize, reopened]
   workflow_dispatch: {}
 
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   check:
-    name: "⚡"
+    name: Trunk Code Quality
+    permissions:
+      actions: read
+      checks: write
+      contents: read
     uses: z-shell/.github/.github/workflows/trunk.yml@main
+    with:
+      arguments: --no-progress