security: harden checkout action

Author: m1rm

.github/workflows/main.yml

@@ -11,6 +11,7 @@ jobs:
     - uses: actions/checkout@v6
       with:
         submodules: recursive
+        persist-credentials: false
     - name: Set up Python 3.14
       uses: actions/setup-python@v5
       with: