Refactor markdownlint workflow

* Add `permissions: contents: read` to limit workflow permissions.
* Switch Node version to `lts/*` for automatic long-term support updates.
* Upgrade actions to latest releases.
* Split the Markdown linting step into separate install and run steps.
* Install `markdownlint-cli` with CI-friendly flags (`--no-audit` `--no-fund`).
* Pin `markdownlint-cli` to version `0.45.0` to avoid potential build breaks when new versions are released.
* Run `markdownlint` with an explicit rather than implicit configuration

Author: xtqqczze

.github/workflows/markdownlint.yml

@@ -1,5 +1,8 @@
 name: Markdownlint
 
+permissions:
+  contents: read
+
 on:
   pull_request:
     paths:
@@ -13,13 +16,15 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v5
     - name: Use Node.js
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v5
       with:
-        node-version: '16'
-    - name: Run Markdownlint
+        node-version: 'lts/*'
+    - name: Install markdownlint-cli
       run: |
         echo "::add-matcher::.github/workflows/markdownlint-problem-matcher.json"
-        npm i -g markdownlint-cli
-        markdownlint "**/*.md"
+        npm install --global --no-audit --no-fund markdownlint-cli@0.45.0
+    - name: Run markdownlint
+      run: |
+        markdownlint --config ./.markdownlint.jsonc '**/*.md'