Harden service-repo workflows: pin actions, fix Semgrep findings, add docs#40

akuzminsky merged 2 commits into

maininfrahouse/github-control:mainfrom

harden-service-repo-workflowsinfrahouse/github-control:harden-service-repo-workflowsCopy head branch name to clipboard