fix: address all zizmor security findings in GitHub Actions workflows

fix: address all zizmor security findings in GitHub Actions workflows #2151