security: harden sdk-regression issue_comment workflow — pin actions, scope permissions + token (PER-8610)

security: harden sdk-regression issue_comment workflow — pin actions, scope permissions + token (PER-8610) #6730