fix: harden CI workflows against prompt injection and supply chain risks#852

stack72 merged 1 commit intomainsysteminit/swamp:mainfrom

ci-hardeningsysteminit/swamp:ci-hardeningCopy head branch name to clipboard