transformers

fix(ci): set persist-credentials: false on actions/checkout and close remaining template injection findings

#45964

Merged