chore: onboard stepsecurity and apply security best practice

[ali-kafel]

Summary

This pull request introduces security and reliability improvements to the GitHub Actions workflow in .github/workflows/master_build.yml. The main focus is on hardening the runner environment and ensuring the use of specific, pinned action versions.

Detail

Security and workflow hardening:

• Added the step-security/harden-runner action to block unwanted network egress and enforce a global allowed endpoints policy, increasing the security of the CI environment.
• Explicitly set the id-token: write permission for the dependencies job, which is required for certain secure workflows.

Workflow reliability:

• Updated all GitHub Action usages (actions/checkout, actions/setup-java, and gradle/gradle-build-action) to use specific commit SHAs instead of version tags, reducing the risk of supply chain attacks and ensuring reproducible builds.

Testing

Documentation

---

Requested Reviewers: @mention