chore(ci): Set checkout actions to not persist credentials (#17476)

Co-authored-by: Trevor Whitney <trevorjwhitney@gmail.com>

Author: periklis

.github/jsonnetfile.json

@@ -8,7 +8,7 @@
           "subdir": "workflows"
         }
       },
-      "version": "8c7c51b23d9d13078a8c44740e3eb6983f7bb667"
+      "version": "72c821916ad9b13ae86027c88c7f32174260fdd9"
     }
   ],
   "legacyImports": true

.github/jsonnetfile.lock.json

@@ -8,8 +8,8 @@
           "subdir": "workflows"
         }
       },
-      "version": "8c7c51b23d9d13078a8c44740e3eb6983f7bb667",
-      "sum": "42ZmTP0NyLXxS/c79suH/xT9EMSmp4L20f4vTzRlYoY="
+      "version": "72c821916ad9b13ae86027c88c7f32174260fdd9",
+      "sum": "t+Ghk4ExAalPKTsNUsiX9ThcY2w0TUvaSNZIurcCrXc="
     }
   ],
   "legacyImports": false

.github/release-workflows.jsonnet

@@ -71,12 +71,14 @@ local lambdaPromtailJob =
     step.new('pull release library code', 'actions/checkout@v4')
     + step.with({
       path: 'lib',
+      'persist-credentials': false,
       ref: '${{ env.RELEASE_LIB_REF }}',
       repository: 'grafana/loki-release',
     }),
     step.new('pull code to release', 'actions/checkout@v4')
     + step.with({
       path: 'release',
+      'persist-credentials': false,
       repository: '${{ env.RELEASE_REPO }}',
     }),
     step.new('setup node', 'actions/setup-node@v4')

.github/vendor/github.com/grafana/loki-release/workflows/common.libsonnet

@@ -14,6 +14,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: "grafana/grafana-github-actions"
+          persist-credentials: false
           path: ./actions
           ref: main
       - name: Install Actions