ci: move GH_BOT_NAME from secrets to vars

.github/workflows/sync-release-assets.yml

@@ -1,7 +1,6 @@
 ---
 name: Sync Release Assets
-permissions:
-  contents: read
+permissions: {}
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -12,12 +11,6 @@ env:
 on:
   workflow_dispatch:
   pull_request:
-    branches:
-      - master
-    types:
-      - opened
-      - reopened
-      - synchronize
   push:
     branches:
       - master
@@ -26,6 +19,8 @@ on:
 
 jobs:
   sync-assets:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -89,7 +84,7 @@ jobs:
         uses: actions-js/push@5a7cbd780d82c0c937b5977586e641b2fd94acc5  # v1.5
         with:
           author_email: ${{ secrets.GH_BOT_EMAIL }}
-          author_name: ${{ secrets.GH_BOT_NAME }}
+          author_name: ${{ vars.GH_BOT_NAME }}
           branch: dist
           directory: dist
           github_token: ${{ secrets.GH_BOT_TOKEN }}

.github/workflows/update-pages.yml

@@ -1,16 +1,9 @@
 ---
 name: Build GH-Pages
-permissions:
-  contents: read
+permissions: {}
 
 on:
   pull_request:
-    branches:
-      - master
-    types:
-      - opened
-      - synchronize
-      - reopened
   push:
     branches:
       - master
@@ -22,6 +15,8 @@ concurrency:
 
 jobs:
   prep:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -38,10 +33,12 @@ jobs:
 
   call-jekyll-build:
     needs: prep
+    permissions:
+      contents: read
     uses: LizardByte/LizardByte.github.io/.github/workflows/jekyll-build.yml@master
     secrets:
       GH_BOT_EMAIL: ${{ secrets.GH_BOT_EMAIL }}
-      GH_BOT_NAME: ${{ secrets.GH_BOT_NAME }}
+      GH_BOT_NAME: ${{ vars.GH_BOT_NAME }}
       GH_BOT_TOKEN: ${{ secrets.GH_BOT_TOKEN }}
     with:
       clean_gh_pages: true