Fix windows signing env (#8412)

.github/workflows/bundle-desktop-linux.yml

@@ -21,7 +21,7 @@ name: "Bundle Desktop (Linux)"
 jobs:
   build-desktop-linux:
     name: Build Desktop (Linux)
-    runs-on: ubuntu-x86-16core-64gb
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout repository

.github/workflows/bundle-desktop-windows.yml

@@ -163,7 +163,7 @@ jobs:
     needs: build-desktop-windows
     if: inputs.signing
     runs-on: windows-latest
-    environment: ${{ (inputs.signing == true) && 'signing' || null }}
+    environment: ${{ inputs.signing && 'signing' || null }}
 
     steps:
       - name: Download unsigned distribution

.github/workflows/release.yml

@@ -76,8 +76,13 @@ jobs:
 #  # ------------------------------------------------------------
   bundle-desktop-windows:
     uses: ./.github/workflows/bundle-desktop-windows.yml
+    permissions:
+      id-token: write
+      contents: read
+      actions: read
     with:
       signing: true
+    secrets: inherit
 
   # ------------------------------------
   # 7) Create/Update GitHub Release