5.1.2

Security\n\n- Pin GitHub Actions to immutable commit SHAs.\n- Add Dependabot updates for Composer with a seven-day cooldown.\n- Add a security policy with private vulnerability reporting instructions.