ci: don't persist creds

Author: CharlieC3

.github/workflows/ci.yml

@@ -125,6 +125,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Get bot user ID
         id: bot-user-id