The Checkout step in the set-default option job was the only one of 17 checkout steps in the workflow missing persist-credentials: false, flagged by zizmor's artipacked audit. Align it with the rest of the file. Co-authored-by: Copilot App <[email protected]>