feat: harden workflow validation and permissions#392

hriszc wants to merge 2 commits intoasyncapi:masterasyncapi/.github:masterfrom

hriszc:codex/workflow-security-validatorhriszc/.github:codex/workflow-security-validatorCopy head branch name to clipboard