ci: supply-chain & secrets hardening (closes #11) · p2pool-starter-stack/p2pool-starter-stack.github.io@5ab9024