security: pin dependencies and restrict token permissions (#90) #225

Job	Run time
Build and test on macOS (macos-latest)	1m 48s
Build and test makefile	52s
Build and test on Windows (windows-latest)	3m 0s
Build and test on macOS (macos-26-intel)	1m 49s
Build and test Fedora on multiple runners (ubuntu-latest)	52s
Build and test on Windows (windows-11-arm)	3m 10s
Build and test Fedora on multiple runners (ubuntu-24.04-arm)	1m 59s
version-release	0s
	13m 30s

Provide feedback