v2.12.0
templates: update example releng signing ticket
workflows: limit permissions to reading repo contents