ci: update egress policies, apply zizmor recommendations (#792)

ci: update egress policies, apply zizmor recommendations (#792) #1580