[kata-dev] GitHub actions security recommendations