Don't persist credentials when checking out repositories

.github/workflows/build_container_image.yaml

@@ -238,8 +238,7 @@ jobs:
         uses: actions/checkout@v6
         with:
           repository: galaxyproject/galaxy-helm
-          token: ${{ secrets.GITHUB_TOKEN }}
-          persist-credentials: true
+          persist-credentials: false
 
       - name: Update Chart.yaml appVersion
         run: |

.github/workflows/publish_artifacts.yaml

@@ -76,6 +76,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           ref: ${{ github.event_name == 'workflow_dispatch' && inputs.release_tag || '' }}
+          persist-credentials: false
       - name: Read Node.js version
         id: node-version
         run: echo "version=$(cat client/.node_version)" >> $GITHUB_OUTPUT