chore(ci): supply-chain security workflow + harden ci.yml#5

Terastar-Paperclip merged 2 commits into

mainquantcli/common:mainfrom

chore/security-scan-baselinequantcli/common:chore/security-scan-baselineCopy head branch name to clipboard