GitHub Actions needs OIDC audience constraints by @yossarian@infosec.exchange https://lobste.rs/s/ipt1em #security https://blog.yossarian.net/2026/08/10/github-actions-needs-oidc-audience-constraints