fix(ci): pin the security workflow runner to ubuntu-24.04 (#134)