chore: reduce secret and token exposure in the platform tests workflow

[Nic-Polumeyv]

Part of #15529. The node call uses no secrets, and only report-status needs contents: write.

Vercel and netlify keep secrets: inherit for now: explicit secrets: blocks only work if those are repo or org secrets rather than environment secrets (actions/runner#4453), and that's only visible in the repo settings. Happy to open a PR once someone confirms.

[pkg-svelte-dev]

Install the latest version of @sveltejs/kit from 5f4ca4e:

pnpm add https://pkg.svelte.dev/@sveltejs/kit/c/5f4ca4e7decb75e2c816349a3882db7da57bcd01

Open in pkg.svelte.dev: https://pkg.svelte.dev/repos/kit/pr/16591

Note

This PR is from a fork. A maintainer must approve approve each commit before it can be built and installed.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 5f4ca4e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR