Multi-step chains: untrusted PR -> low-privilege workflow -> high-privilege workflow -> cloud credentials.