ci: pin actions, scope token permissions, and scan workflows - #109

Click through to the see the full socket security project report page for this commit to see information about every dependency in this project.