Rework triggers

.github/workflows/php.check.yml

@@ -6,11 +6,6 @@ permissions:
 on:
   workflow_call:
   workflow_dispatch:
-  push:
-    branches:
-      - main
-  schedule:
-    - cron: "0 11 * * 2" # 11am Patch Tuesday
 
 concurrency:
   group: ${{ github.head_ref || github.run_id }}

.github/workflows/trunk.cache.yml

@@ -1,6 +1,8 @@
 name: "Quality Control: Trunk Cache"
 
-permissions: read-all
+permissions:
+  contents: read
+  actions: write
 
 on:
   workflow_call:
@@ -10,6 +12,7 @@ on:
       - main
     paths:
       - .trunk/trunk.yaml
+      - .github/workflows/trunk.cache.yml
   schedule:
     - cron: "0 9 * * 1" # 9am Tooling Monday
 

.github/workflows/trunk.check.yml

@@ -1,15 +1,11 @@
 name: "Quality Control: Trunk Check"
 
-permissions: read-all
+permissions:
+  contents: read
 
 on:
   workflow_call:
   workflow_dispatch:
-  push:
-    branches:
-      - main
-  schedule:
-    - cron: "0 11 * * 2" # 11am Patch Tuesday
 
 concurrency:
   group: ${{ github.head_ref || github.run_id }}