ci: apply security best practices #128

Job	Run time
Test run action	20s
Run tests (codespell, false)	22s
Run tests (git+https://github.com/codespell-project/codespell.git, false)	23s
Check for spelling errors	16s
Diagnose bats	-1s
	1m 20s

Provide feedback