docs: security hardening info for actions untrusted content (#38048)
Co-authored-by: Sharra-writes <sharra-writes@github.com>
Co-authored-by: Jaroslav Lobačevski <jarlob@github.com>
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>