ci: harden CI/CD — SHA-pin actions, bump pnpm to 11.1.2, add zizmor#1685

jpr5 merged 5 commits into

mainag-ui-protocol/ag-ui:mainfrom

alem/ci-security-hardeningag-ui-protocol/ag-ui:alem/ci-security-hardeningCopy head branch name to clipboard