Sentinel (MIT) Deterministic security scanner for GitHub Actions workflows