fix: tighten workflow permissions, add security hardening, and fix uv tool invocations#358

jmeridth merged 2 commits intomaingithub-community-projects/cleanowners:mainfrom

fix/security-hardening-and-uv-invocationsgithub-community-projects/cleanowners:fix/security-hardening-and-uv-invocationsCopy head branch name to clipboard