chore(security): cooldown, deterministic installs, harden labeler workflow#262

Copilot wants to merge 5 commits into

mainadvanced-security/codeql-extractor-iac:mainfrom

copilot/sca-auditadvanced-security/codeql-extractor-iac:copilot/sca-auditCopy head branch name to clipboard