SCREENER_API_KEY and AZURE_STORAGE_CONNECTION_STRING

Also, now that PRs don't need access to these secrets to build, can we change the workflow permissions for token usage?