fix(ci): harden GitHub Actions workflows (#14798) (#14800)

fix(ci): harden workflow files flagged on #14798

Co-authored-by: hf-security-analysis[bot] <265538906+hf-security-analysis[bot]@users.noreply.github.com>