feat: bake in Microsoft Security Baseline via opt-in 'hardened' profile - #4

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, anchore/sbom-action@f8bdd1d8ac5e901a77a92f111440fdb1b593736b. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/