Push website rebuild commits via deploy key instead of GITHUB_TOKEN

.github/workflows/website-build.yml

@@ -25,7 +25,7 @@ concurrency:
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   build-website:
@@ -35,6 +35,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4.1.7
+        with:
+          ssh-key: ${{ secrets.WEBSITE_DEPLOY_KEY }}
 
       - name: Set up Node.js
         uses: actions/setup-node@v4

.github/workflows/website-roadmap-rebuild.yml

@@ -12,7 +12,7 @@ concurrency:
   cancel-in-progress: false
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   rebuild-roadmap:
@@ -27,6 +27,7 @@ jobs:
         uses: actions/checkout@v4.1.7
         with:
           ref: main
+          ssh-key: ${{ secrets.WEBSITE_DEPLOY_KEY }}
 
       - name: Set up Node.js
         uses: actions/setup-node@v4