chore: onboard stepsecurity and apply security best practice

[ali-kafel]

This pull request enhances the security and reliability of the GitHub Actions workflow defined in .github/workflows/pipeline.yml. The main improvements include hardening the runner environment, explicitly setting permissions, and pinning action dependencies to specific commit SHAs.

Security hardening:

• Added the step-security/harden-runner action to both ci and dependent jobs to restrict network egress and enforce a global allowed endpoints policy. [1] [2]
• Explicitly set the id-token: write permission for jobs, improving security by limiting job permissions to only those required. [1] [2]

Dependency management:

• Updated all third-party GitHub Actions (actions/checkout, actions/setup-node, foundry-rs/foundry-toolchain) to use pinned commit SHAs for improved supply chain security and reproducibility.