ci: run privileged workflows from main; pin actions; harden CI#203

behinddwalls merged 1 commit into

mainuber/submitqueue:mainfrom

fix-ciuber/submitqueue:fix-ciCopy head branch name to clipboard