ci: fix release workflow

.github/workflows/release.yml

@@ -30,6 +30,10 @@ permissions:
   contents: write
   pull-requests: write
   actions: write
+  id-token: write
+  packages: write
+  security-events: write
+  attestations: write
 
 jobs:
   prepare:
@@ -48,20 +52,17 @@ jobs:
   cloud:
     name: Release Cloud
     if: ${{ inputs.web || github.event_name != 'workflow_dispatch' }}
-    runs-on: ubuntu-latest
     needs:
       - prepare
-    steps:
-      - uses: actions/checkout@v4
-      - name: Release Cloud
-        uses: ./.github/workflows/release-cloud.yml
-        with:
-          build-type: ${{ needs.prepare.outputs.BUILD_TYPE }}
-          app-version: ${{ needs.prepare.outputs.APP_VERSION }}
-          git-short-hash: ${{ needs.prepare.outputs.GIT_SHORT_HASH }}
+    uses: ./.github/workflows/release-cloud.yml
+    secrets: inherit
+    with:
+      build-type: ${{ needs.prepare.outputs.BUILD_TYPE }}
+      app-version: ${{ needs.prepare.outputs.APP_VERSION }}
+      git-short-hash: ${{ needs.prepare.outputs.GIT_SHORT_HASH }}
 
-  release-image:
-    name: Release Image
+  image:
+    name: Release Docker Image
     runs-on: ubuntu-latest
     needs:
       - prepare
@@ -100,29 +101,23 @@ jobs:
   desktop:
     name: Release Desktop
     if: ${{ inputs.desktop || github.event_name != 'workflow_dispatch' }}
-    runs-on: ubuntu-latest
     needs:
       - prepare
-    steps:
-      - uses: actions/checkout@v4
-      - name: Release Desktop
-        uses: ./.github/workflows/release-desktop.yml
-        with:
-          build-type: ${{ needs.prepare.outputs.BUILD_TYPE }}
-          app-version: ${{ needs.prepare.outputs.APP_VERSION }}
-          git-short-hash: ${{ needs.prepare.outputs.GIT_SHORT_HASH }}
+    uses: ./.github/workflows/release-desktop.yml
+    secrets: inherit
+    with:
+      build-type: ${{ needs.prepare.outputs.BUILD_TYPE }}
+      app-version: ${{ needs.prepare.outputs.APP_VERSION }}
+      git-short-hash: ${{ needs.prepare.outputs.GIT_SHORT_HASH }}
 
   mobile:
     name: Release Mobile
     if: ${{ inputs.mobile }}
-    runs-on: ubuntu-latest
     needs:
       - prepare
-    steps:
-      - uses: actions/checkout@v4
-      - name: Release Mobile
-        uses: ./.github/workflows/release-mobile.yml
-        with:
-          build-type: ${{ needs.prepare.outputs.BUILD_TYPE }}
-          app-version: ${{ needs.prepare.outputs.APP_VERSION }}
-          git-short-hash: ${{ needs.prepare.outputs.GIT_SHORT_HASH }}
+    uses: ./.github/workflows/release-mobile.yml
+    secrets: inherit
+    with:
+      build-type: ${{ needs.prepare.outputs.BUILD_TYPE }}
+      app-version: ${{ needs.prepare.outputs.APP_VERSION }}
+      git-short-hash: ${{ needs.prepare.outputs.GIT_SHORT_HASH }}