GitHub Actions: secure self-hosted runners by limiting them to specific workflows

You can now enforce consistent usage of self-hosted runner groups across your organization and enterprise.