chore(docs/cicd): make docs workflow secure

.github/workflows/on-docs.yml

@@ -0,0 +1,33 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+
+name: Publish Documentation
+
+on:
+  workflow_run:
+    workflows: ["PR"]
+    types:
+      - completed
+
+concurrency:
+  group: pages-deploy
+  cancel-in-progress: false
+
+jobs:
+  docs-deploy:
+    uses: eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml@dev
+    permissions:
+      pages: write
+      id-token: write
+      contents: write
+      pull-requests: write

.github/workflows/on-pr.yml

@@ -54,3 +54,7 @@ jobs:
 
   bazel-lock:
     uses: eclipse-score/cicd-workflows/.github/workflows/bzlmod-lock-check.yml@93aac16ada7d247bbb6ae926509ddea74cf5213a # main in 2026-06-11
+
+  docs-build:
+    name: Build documentation
+    uses: eclipse-score/cicd-workflows/.github/workflows/docs.yml@dev