install stepsecurity harden-runner in Spoon's CI/CD pipeline

[monperrus]

a successful attack on Spoon would exfiltrate tons of proprietary code.

[I-Al-Istannen]

From what I glanced this instruments the runner to hijack and MITM all network requests and process creations and then tries to apply some heuristics for anomaly detection?