bbot github_workflows module symlink path traversal

The `github_workflows` module constructs local directory paths from user-controlled repository names without validating for symlinks, allowing a local attacker to redirect workflow data writes via a symlink.

Users running bbot scans where a local attacker can plant symlinks in the scan directory.

Update bbot to a patched version once available, or manually validate that output paths are not symlinks before scanning.