Fixed
- (ci) Disable cache in privileged workflows in cc910be
- (ci) Scope publish oidc permission in 0b7c94b
- (ci) Drop unused npm token from publish in 6a86290
- (ci) Run pr benchmarks without secrets in d4020ff
- (ci) Ensure git-cliff uses GITHUB_TOKEN if token is undefined in 6d0bda0
- (ci) Restore benchmark bot comments safely in 74a9931