ci: pin action SHAs + add permissions + lower min_score

Author: hashgraph-online[bot]

.github/workflows/plugin-quality-gate.yml

@@ -7,14 +7,22 @@ on:
       - "skills/**"
       - ".mcp.json"
 
+concurrency:
+  group: codex-plugin-scanner-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
 jobs:
   scan:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
       - name: Codex plugin quality gate
-        uses: hashgraph-online/hol-codex-plugin-scanner-action@v1
+        uses: hashgraph-online/hol-codex-plugin-scanner-action@b45d6b583afe05819b24edc8e6418c9ad2e1f1d0
         with:
           plugin_dir: "."
-          min_score: 80
+          min_score: 60
           fail_on_severity: high