fix(tasks): change workflow privilege to tasks