ci: disable credential persistence in checkout steps

[xtqqczze]

https://docs.zizmor.sh/audits/#artipacked

[codspeed-hq]

Merging this PR will not alter performance

✅ 20 untouched benchmarks
⏩ 9 skipped benchmarks¹

---

_{Comparing xtqqczze:zizmor/artipacked (09ced09) with main (b19bff4)}

Footnotes

1. 9 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.12%. Comparing base (3f5db7d) to head (0d1f6ea).
⚠️ Report is 39 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main      #85      +/-   ##
==========================================
+ Coverage   78.64%   85.12%   +6.48%     
==========================================
  Files          13       15       +2     
  Lines        2585     3490     +905     
  Branches      230      246      +16     
==========================================
+ Hits         2033     2971     +938     
+ Misses        552      518      -34     
- Partials        0        1       +1     

Flag	Coverage Δ
macos_latest	84.89% <ø> (+7.25%)	⬆️
ubuntu_latest	84.61% <ø> (+6.43%)	⬆️
windows_latest	17.33% <ø> (+2.63%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[xtqqczze]

@cakebaker PTAL

[cakebaker]

Thanks!