chore: revamp gha workflows

[nirinchev]

This PR introduces the following changes:

• Separates the linting jobs into a lint workflow
• Adds a code_health_fork workflow that will be run on pull_request_target whenever the PR is from a fork or from dependabot
• Adds permissions to all workflows
• Reformats workflows (previously we had different styles for yaml vs yml)

The impetus for this change is to allow dependabot PRs to pass.

[coveralls]

Pull Request Test Coverage Report for Build 14672998392

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

• For more information on this, see Tracking coverage changes with pull request builds.
• To avoid this issue with future PRs, see these Recommended CI Configurations.
• For a quick fix, rebase this PR at GitHub. Your next report should be accurate.

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 82.446%

---

Totals
Change from base Build 14671868948:	0.0%
Covered Lines:	748
Relevant Lines:	859

---

💛 - Coveralls