ci: Resolve Zizmor static security audit findings in workflows and composite actions

ci: Resolve Zizmor static security audit findings in workflows and composite actions #16