- Private-repository label callers document `actions: read` alongside checks and statuses for workflow-run check-rollup nodes (#173).