ci: harden

[pajlada]

• dependabot: cooldown on deps
• pin actions
• don't persist credentials
• dsable caching

Pull request checklist:

• CHANGELOG.md was updated, if applicable

Description

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.18%. Comparing base (af8972c) to head (1ef6608).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #962   +/-   ##
=======================================
  Coverage   51.18%   51.18%           
=======================================
  Files         105      105           
  Lines        2831     2831           
=======================================
  Hits         1449     1449           
  Misses       1382     1382           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.