[StepSecurity] ci: Harden GitHub Actions (#801)

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

.github/workflows/UpdateWinget.yml

@@ -7,11 +7,19 @@ on:
   release:
     types: [published]
 
+permissions:
+  contents: read
+
 jobs:
     build:
         runs-on: windows-latest
 
         steps:
+        - name: Harden Runner
+          uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+          with:
+            egress-policy: audit
+
         - name: '📫🚀 Publish Latest MFCMAPI Release to Winget'
           run: |
             $wingetPackage = "Microsoft.MFCMAPI"