GitHub Actions Audit

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.