master
ci: harden pull_request_target workflows against pwn requests
ci: add autobackport workflow
ci: serialize make distcheck in build.yml
CI: don't specify 'push:'/'pull_request:' branches
ci: bump actions/checkout from 6 to 7