creachadair .github: update workflow triggers and permissions