Apply GitHub Actions security policies (#2778)