v1.2.12

GitHub Actions workflows now use actions/checkout v7.0.0, closing the stale Dependabot workflow update. This release keeps the 1.2.11 hosted-hardening changes in place and updates branch/tag/release metadata to the current head.