ci: harden env and workflow inputs in run blocks (#286)

ci: harden env and workflow inputs in run blocks (#286) #306