ci: various updates and ossf

[janbiasi]

Tasks

• [x] I've read the CONTRIBUTING guide
• [x] Necessary tests have been added

Content

• Introduce OSSF analysis and badge
• Upgrade remaining outdated GitHub actions
• Add non-destructive default permissions to triage actions
• Add security policy

[github-actions[bot]]

:tada: This PR is included in version 1.0.2 :tada:

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot :package::rocket: