Hardened workflows security

[thelovekesh]

• Setup cooldown period in dependabot config
• Remove template eval from code and move to env vars
• Disable persisting credentials in git config

[gemini-code-assist]

Code Review

This pull request attempts to add a cooldown configuration to the Dependabot settings across multiple package ecosystems. However, the cooldown key is not a valid configuration option for Dependabot, which will result in configuration errors and prevent updates from being scheduled. Additionally, the reviewer noted that security hardening measures mentioned in the pull request description are missing from the actual code changes.

[github-actions]

📦 wpm cli builds 📦

• darwin/amd64 - build
• darwin/arm64 - build
• linux/amd64 - build
• linux/arm/v6 - build
• linux/arm/v7 - build
• linux/arm64 - build
• linux/ppc64le - build
• linux/riscv64 - build
• linux/s390x - build
• windows/amd64 - build
• windows/arm64 - build