v2023.2
ci: Work around GH actions `container:` + git + security bug
workflows: limit permissions to reading repo contents
cargo: bump minimum Rust version to 1.63
ci: Add a flow that combines C build and Rust integration tests