fix(ci): harden against template injection and credential exposure#2514

egibs merged 5 commits into

mainchainguard-dev/melange:mainfrom

security/psec-923-melangechainguard-dev/melange:security/psec-923-melangeCopy head branch name to clipboard