Step Security Harden Runner vulnerabilities

• step-security harden-runner, step security harden runner +1 more Harden-Runner has command injection weaknesses in `setup.ts` and `arc-runner.ts` CVE-2024-52587 Fix available 2.7 LowNovember 18, 2024