v5.0.2
ci: use .go-version file for actions/setup-go
ci: use main branch for docs upstream validation workflow
fix zizmor security alerts on GHA workflows
gha: set default permissions to "contents: read"