fix(security): harden sanitize, flatten, redaction, signature validation, CSP, proxies and CI

.github/workflows/sponsors.yml

@@ -6,7 +6,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: JamesIves/github-sponsors-readme-action@v1
+      - uses: JamesIves/github-sponsors-readme-action@02650b8cd445fc16dfef73195f9c406dce041623 # v1.6.1
         with:
           token: ${{ secrets.SPONSORS_TOKEN }}
           file: 'README.md'