ci: harden

[pajlada]

• dependabot: cooldown on deps
• pin actions
• don't persist credentials
• dsable caching

Pull request checklist:

• CHANGELOG.md was updated, if applicable

Description

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 51.18%. Comparing base (e7b6955) to head (e21b77c).

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #962      +/-   ##
==========================================
+ Coverage   49.70%   51.18%   +1.48%     
==========================================
  Files         105      105              
  Lines        3169     2831     -338     
==========================================
- Hits         1575     1449     -126     
+ Misses       1518     1382     -136     
+ Partials       76        0      -76     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.