meta: security hardening for github actions

meta: security hardening for github actions #57573