Fix workflow permissions

.github/workflows/release.yml

@@ -1,19 +1,12 @@
 name: Release
 on:
-  push: { tags: "v*.*.*" }
+  push: { tags: "v[0-9]+.[0-9]+.[0-9]+*" }
+  workflow_dispatch:
+permissions: {contents: read}
 
 jobs:
-  github:
-    uses: nodenv/.github/.github/workflows/release.yml@v1
-
-  npm:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          scope: '@nodenv'
-          registry-url: 'https://registry.npmjs.org'
-      - run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPMJS_TOKEN }}
+  release:
+    permissions: {contents: write}
+    uses: nodenv/.github/.github/workflows/release.yml@v4
+    with:
+      homebrew: false

.github/workflows/sync-master.yml

@@ -1,8 +1,19 @@
-name: Sync Master
+name: Sync Default Branch
 on:
   push: { branches: main }
   workflow_dispatch:
+permissions: {contents: read}
 
 jobs:
   sync:
-    uses: nodenv/.github/.github/workflows/sync-master.yml@v1
+    permissions: {contents: write}
+    uses: nodenv/.github/.github/workflows/sync-master.yml@v4
+
+# One-time commands for users to switch-over:
+#
+# ```console
+# git branch -m master main
+# git fetch origin
+# git branch -u origin/main main
+# git remote set-head origin -a
+# ```