* Pass secrets explicitely

* Inherit all secrets from calling main workflow

(cherry picked from commit d9dd282d3e521aa33d6705f08ce304efba88d69f)