Backport of SEC-090: Automated trusted workflow pinning (2024-09-01) into release/0.16.x

Backport of SEC-090: Automated trusted workflow pinning (2024-09-01) into release/0.16.x #5192