next.js

ci: declare explicit least-privilege permissions in automation workflows

#90297

Open