Fix unsafe package publishing workflow security issues

Co-authored-by: gcatanese <1771700+gcatanese@users.noreply.github.com>