ci: harden run blocks against template injection

[fabriziosestito]

Description

Hardens run blocks against template injection by using env vars

[fabriziosestito]

Blocked by #1071

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 52.22%. Comparing base (bbdbf85) to head (5296524).
⚠️ Report is 7 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1079      +/-   ##
==========================================
- Coverage   52.24%   52.22%   -0.02%     
==========================================
  Files          61       61              
  Lines        5147     5147              
==========================================
- Hits         2689     2688       -1     
  Misses       2071     2071              
- Partials      387      388       +1     

Flag	Coverage Δ
unit-tests	52.22% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.