AAE-41553 Fix CI validation on crowdin PRs (#11557)

* AAE-41553 Fix CI validation on crowdin PRs

* trigger pull after crowdin push to keep the translation PR up to date

* pass only required secrets to workflow call to make sonar happy

.github/workflows/pull-from-crowdin.yml

@@ -3,12 +3,20 @@ on:
   schedule:
     - cron: "0 7-17 * * 1-5"
   workflow_dispatch:
+  workflow_call:
+    secrets:
+      BOT_GITHUB_TOKEN:
+        required: true
+      CROWDIN_TRANSLATIONS_TOKEN:
+        required: true
 jobs:
   pull-from-crowdin:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          token: ${{ secrets.BOT_GITHUB_TOKEN }}
       - name: Pull translations from Crowdin
         uses: crowdin/github-action@60debf382ee245b21794321190ad0501db89d8c1 # v2.13.0
         with:

.github/workflows/release.yml

@@ -184,6 +184,14 @@ jobs:
         env:
           CROWDIN_TOKEN: ${{ secrets.CROWDIN_TRANSLATIONS_TOKEN }}
 
+  pull-translation-keys-from-crowdin:
+    needs: push-translation-keys-to-crowdin
+    name: Run Crowdin pull pipeline for up-to-date sync
+    uses: ./.github/workflows/pull-from-crowdin.yml
+    secrets:
+      BOT_GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
+      CROWDIN_TRANSLATIONS_TOKEN: ${{ secrets.CROWDIN_TRANSLATIONS_TOKEN }}
+
   finalize:
     if: always()
     runs-on: ubuntu-latest