GHA: make secrets inherited for build-kata-static-tarball-s390x

This is to make GHA secrets inherited for the workflow titled
`build-kata-static-tarball-s390x` to configure an environment
variable `CI_HKD_PATH` for a `build-asset-boot-image-se` step.

Fixes: #8611

Signed-off-by: Hyounggyu Choi <Hyounggyu.Choi@ibm.com>

.github/workflows/build-kata-static-tarball-s390x.yaml

@@ -20,6 +20,9 @@ on:
         required: false
         type: string
         default: ""
+    secrets:
+      CI_HKD_PATH:
+        required: true
 
 jobs:
   build-asset:

.github/workflows/ci.yaml

@@ -42,6 +42,8 @@ jobs:
       tarball-suffix: -${{ inputs.tag }}
       commit-hash: ${{ inputs.commit-hash }}
       target-branch: ${{ inputs.target-branch }}
+    secrets:
+      CI_HKD_PATH: ${{ secrets.CI_HKD_PATH }}
 
   build-kata-static-tarball-ppc64le:
     uses: ./.github/workflows/build-kata-static-tarball-ppc64le.yaml

.github/workflows/payload-after-push.yaml

@@ -33,7 +33,8 @@ jobs:
       commit-hash: ${{ github.sha }}
       push-to-registry: yes
       target-branch: ${{ github.ref_name }}
-    secrets: inherit
+    secrets:
+      CI_HKD_PATH: ${{ secrets.CI_HKD_PATH }}
 
   build-assets-ppc64le:
     uses: ./.github/workflows/build-kata-static-tarball-ppc64le.yaml

.github/workflows/release-s390x.yaml

@@ -11,6 +11,8 @@ jobs:
     uses: ./.github/workflows/build-kata-static-tarball-s390x.yaml
     with:
       stage: release
+    secrets:
+      CI_HKD_PATH: ${{ secrets.CI_HKD_PATH }}
 
   kata-deploy:
     needs: build-kata-static-tarball-s390x