ci: run in host repo context
For security, don't allow workflows to run using the upstream
repository token. Examples for this action show it working as
pull-request.
Remove quotes from bucketConfigFile to match AI suggestion.
Not sure this will solve the issue of finding the config file