How to prevent other repositories from accessing actions and reusable workflows in a private GitHub repository