Address Sonar complaints

[TimHess]

Use slightly safer secrets expansion in workflows.
Add a resource integrity check on the Bootstrap CSS CDN ref.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Summary - All Code Coverage (ubuntu-latest)

Assembly	Line coverage	Branch coverage
Steeltoe.Bootstrap.AutoConfiguration	97.4%	83.3%
Steeltoe.Common	86.4%	77%
Steeltoe.Common.Certificates	97.2%	80.2%
Steeltoe.Common.Hosting	83.5%	65%
Steeltoe.Common.Http	97.4%	80.9%
Steeltoe.Common.Logging	81.1%	56.2%
Steeltoe.Common.Net	64.5%	66.6%
Steeltoe.Configuration.Abstractions	96.3%	89.4%
Steeltoe.Configuration.CloudFoundry	97.8%	92.7%
Steeltoe.Configuration.ConfigServer	91.6%	86.2%
Steeltoe.Configuration.Encryption	97.6%	87.8%
Steeltoe.Configuration.Kubernetes.ServiceBindings	95.6%	82.6%
Steeltoe.Configuration.Placeholder	93.8%	82.6%
Steeltoe.Configuration.RandomValue	93.2%	83.3%
Steeltoe.Configuration.SpringBoot	98.3%	85%
Steeltoe.Connectors	94.5%	85.6%
Steeltoe.Connectors.EntityFrameworkCore	79.7%	65.3%
Steeltoe.Discovery.Configuration	96.3%	75%
Steeltoe.Discovery.Consul	91.5%	84.4%
Steeltoe.Discovery.Eureka	91.5%	81.3%
Steeltoe.Discovery.HttpClients	89.9%	91.4%
Steeltoe.Logging.Abstractions	99.4%	95.6%
Steeltoe.Logging.DynamicConsole	100%	92.3%
Steeltoe.Logging.DynamicSerilog	99.1%	95.4%
Steeltoe.Management.Abstractions	100%	100%
Steeltoe.Management.Endpoint	96%	87.1%
Steeltoe.Management.Prometheus	95.8%	76.9%
Steeltoe.Management.Tasks	95.2%	80%
Steeltoe.Management.Tracing	100%	75%
Steeltoe.Security.Authentication.JwtBearer	100%	93.7%
Steeltoe.Security.Authentication.OpenIdConnect	87.7%	66.6%
Steeltoe.Security.Authorization.Certificate	95.6%	61.5%
Steeltoe.Security.DataProtection.Redis	100%	****