Lockdown untrusted workflows

Merge branch 'develop' into dependabot/pip/develop/mkdocs-llmstxt-0.3.1 #3135

Sign in to view logs

Run time

Learn about OS pricing on GitHub Actions

Job	Run time
Harden Security	7s
	7s