tj-actions CVEs

Tracked CISA KEV vulnerabilities affecting tj-actions products.