Workflow maintenance

Signed-off-by: Esta Nagy <nagyesta@gmail.com>

Author: nagyesta

.github/workflows/docker.yml

@@ -6,6 +6,9 @@ on:
     branches: [ main ]
   pull_request:
     branches: [ main ]
+  workflow_dispatch:
+
+permissions: read-all
 
 jobs:
   build:

.github/workflows/pr-labeler.yml

@@ -11,11 +11,12 @@ jobs:
   build:
     name: Update images action
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0
-          token: ${{ secrets.PUBLISH_KEY }}
       - name: "Update versions"
         run: bash propagete-version-update.sh
       - name: "Git commit"