Harden ci-cd workflow with SHA-pinned actions and egress blocking#1049

evanepio merged 1 commit intomainevanepio/dotmanca:mainfrom

fix-ci-cd-securityevanepio/dotmanca:fix-ci-cd-securityCopy head branch name to clipboard