ci: set persist-credentials: false on checkout steps

[henrikwidlund]

Description

Pinned actions

Type of change

• New feature (non-breaking change which adds functionality)

How Has This Been Tested?

Not testable / tested via CI

Checklist:

• My code follows the code guidelines of this project
• My pull request represents one logical piece of work. Do not combine multiple unrelated changes into a single pull request.
• My changes pass the linter checks (see code guidelines) and unit tests python -m unittest discover tests. PRs with failing linter or unit tests will not be merged.
• I have tested and performed a self-review of my code

[zehnm]

LGTM, thanks!