Update GitHub Actions

[coliff]

This pull request updates several GitHub Actions workflows to use specific commit SHA references for improved security and reproducibility, adds a CODEOWNERS file, and makes minor documentation and configuration improvements. The most significant changes are grouped below.

Workflow and CI/CD Improvements:

• All GitHub Actions in workflow files (like actions/checkout, actions/setup-node, github/codeql-action, and streetsidesoftware/cspell-action) are now pinned to specific commit SHAs instead of version tags, enhancing security and traceability. The persist-credentials: false option is also set for most checkouts to prevent credential leakage. (.github/workflows/codeql-analysis.yml, .github/workflows/publish.yml, .github/workflows/spellcheck.yml, .github/workflows/super-linter.yml, .github/workflows/test.yml) [1] [2] [3] [4] [5] [6]

• The workflow file for publishing was renamed from .github/workflows/pubish.yml to .github/workflows/publish.yml, and permissions for contents: read and id-token: write were explicitly added.

Repository Ownership and Documentation:

• Added a CODEOWNERS file assigning ownership of all files to @coliff.
• Minor documentation corrections and clarifications in .cursor/rules/general.mdc

Configuration and Spellcheck:

• Added "sarif" to the list of allowed words in .cspell.json to prevent false positives in spellchecking.

These changes collectively improve repository security, maintainability, and clarity.