meta: bump step-security/harden-runner from 2.5.1 to 2.6.0 (#6076)

meta: bump step-security/harden-runner from 2.5.1 to 2.6.0 (#6076) #21