hardening GitHub Action Just hardens the used image a bit replaces http links with https ones as a way to mitigate attacks on APT allows gnupg to fetch keys over TLS