dockerfiles

gha: bump step-security/harden-runner from 2.5.1 to 2.6.0

#2390

Merged