Merge pull request matplotlib#30332 from tacaswell/harden_gha

CI: Harden GHA configuration

Author: ksunden

.github/workflows/reviewdog.yml renamed to .github/workflows/linting.yml

@@ -13,6 +13,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
         with:
           fetch-depth: 0
+          persist-credentials: false
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5.6.0
         with:
           python-version: "3.x"