chore: align GitHub Actions with other projectwallace repositories

[bartveneman]

• lock down permissions
• split publish into separate jobs
• add 7 day cooldown to dependabot
• add ✂️ Knip

[github-actions]

⚠️ Dependency Count

This PR adds 54 new dependencies (229 → 283), which exceeds the threshold of 10.

⚠️ Duplicate Dependencies (found: 2, threshold: 2)

📦 Package	📋 Versions
@emnapi/core	3 versions root@ @vitest/[email protected] ... [email protected] @rolldown/[email protected] @emnapi/[email protected] root@ [email protected] [email protected] @oxc-parser/[email protected] @emnapi/[email protected] root@ [email protected] [email protected] @rolldown/[email protected] @emnapi/[email protected]
@emnapi/runtime	3 versions root@ @vitest/[email protected] ... [email protected] @rolldown/[email protected] @emnapi/[email protected] root@ [email protected] [email protected] @oxc-parser/[email protected] @emnapi/[email protected] root@ [email protected] [email protected] @rolldown/[email protected] @emnapi/[email protected]

💡 To find out what depends on a specific package, run: pnpm -r why example-package

📊 Dependency Size Changes

Warning

This PR adds 17.8 MB of new dependencies, which exceeds the threshold of 100 kB.

📦 Package	📏 Size
[email protected]	4.6 MB
@oxc-resolver/[email protected]	2.1 MB
@oxc-parser/[email protected]	2.1 MB
@emnapi/[email protected]	2 MB
[email protected]	1.9 MB
[email protected]	1.8 MB
[email protected]	1.4 MB
[email protected]	686 kB
@emnapi/[email protected]	433.6 kB
[email protected]	206.1 kB
[email protected]	186 kB
[email protected]	163.2 kB
[email protected]	61.4 kB
[email protected]	21.6 kB
[email protected]	8.2 kB
[email protected]	7.7 kB
[email protected]	6.1 kB

Total size change: 17.8 MB

⚠️ Package Size Increase

📦 Package	📏 Base Size	📏 Source Size	📈 Size Change
@projectwallace/format-css	8.7 kB	8.7 kB	+26 B