upstream-sync: workflow drift detected

[github-actions]

The automated upstream sync detected workflow file changes that were excluded (GITHUB_TOKEN lacks workflow scope).

Changed files: .github/workflows/binaries-upload-release.yml .github/workflows/build.yml .github/workflows/chart-push-release.yml .github/workflows/codeql.yml .github/workflows/image-build.yml .github/workflows/image-push-master.yml .github/workflows/image-push-release.yml .github/workflows/stale.yml .github/workflows/test.yml

Review the upstream diff and apply relevant CI/security workflow fixes manually:

git diff origin/main..upstream/master -- .github/workflows/

Auto-created by upstream-sync workflow.