fix: harden GitHub Actions workflows#1405

dagecko wants to merge 1 commit into

d2l-ai:masterd2l-ai/d2l-zh:masterfrom

dagecko:runner-guard/fix-ci-securitydagecko/d2l-zh:runner-guard/fix-ci-securityCopy head branch name to clipboard