GH-49728: [CI] Set persist-credentials: false in checkout actions

[thisisnic]

Rationale for this change

Some CI jobs didn't have persist-credential set to false, which presents potential risks

What changes are included in this PR?

Set persist-credentials to false

Are these changes tested?

Run CI jobs

Are there any user-facing changes?

No

• GitHub Issue: [CI] Set persist-credentials: false in checkout actions #49728

[github-actions]

⚠️ GitHub issue #49728 has been automatically assigned in GitHub to PR creator.

[raulcd]

We probably should add it here:

arrow/dev/tasks/macros.jinja

Lines 34 to 35 in d9aeaa1

	with:
	fetch-depth: {{ fetch_depth }}

and potentially here too:

arrow/dev/tasks/macros.jinja

Lines 85 to 86 in d9aeaa1

	with:
	path: crossbow

[conbench-apache-arrow]

After merging your PR, Conbench analyzed the 3 benchmarking runs that have been run so far on merge-commit 47053cc.

There was 1 benchmark result with an error:

• Commit Run on amd64-m5-4xlarge-linux at 2026-04-14 18:40:06Z
  • dataset-serialize (Python) with dataset=nyctaxi_multi_ipc_s3, format=arrow, selectivity=100pc

There were no benchmark performance regressions. 🎉

The full Conbench report has more details. It also includes information about 7 possible false positives for unstable benchmarks that are known to sometimes produce them.