chore: set explicit workflow permissions and pin down actions#29

tdruez merged 1 commit intomainaboutcode-org/django-altcha:mainfrom

workflow-securityaboutcode-org/django-altcha:workflow-securityCopy head branch name to clipboard