CI: Harden GHA configuration#22

tacaswell merged 5 commits intomatplotlib:mainmatplotlib/mpl-gui:mainfrom

tacaswell:harden_ghatacaswell/mpl-gui:harden_ghaCopy head branch name to clipboard