adding guidance on best practices for GitHub Actions

adding guidance on best practices for GitHub Actions #320