Add a safe-upload-artifacts action

[szczys]

This combined the functionality of the mask_secrets and upload-artifact actions.

This action takes a name and path input in the same formatting as the upload-artifact action, masks any GitHub actions found in the files on those paths, and then calls the upload-artifact action to upload them as expected.

resolves https://github.com/golioth/firmware-issue-tracker/issues/669

[github-actions]

Visit the preview URL for this PR (updated for commit faa7ff1):

https://golioth-firmware-sdk-doxygen-dev--pr601-szczys-action-snj6ldvf.web.app

_{(expires Wed, 25 Sep 2024 19:11:15 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: a9993e61697a3983f3479e468bcb0b616f9a0578}

[github-actions]

Code Coverage (Linux)

Type	Coverage
lines	65.6% (1402 of 2138 lines)
functions	78.1% (139 of 178 functions)

[github-actions]

Code Coverage (Zephyr)

Package	Line Rate	Branch Rate	Health
include.golioth	75%	50%	✔
port.zephyr	40%	19%	❌
src	44%	23%	❌
Summary	43% (1227 / 2823)	23% (468 / 2035)	❌

[sam-golioth]

Very cool!

[sam-golioth]

Suggested change

	Search all files in a give path(s) and replace any GitHub secrets with ***NAME_OF_SECRET***
	Search all files in a given path(s) and replace any GitHub secrets with ***NAME_OF_SECRET***

[sam-golioth]

We can remove the need to write another file:

Suggested change

	uniq __grep_search_output.txt > __files_to_mask.txt
	if [ -s __files_to_mask.txt ]; then
	cat __files_to_mask.txt | xargs -I{} sed -i "s/$ESCAPED_SECRET/***$key***/g" {}
	fi
	if [ -s __grep_search_output.txt ]; then
	uniq __grep_search_output.txt | xargs -I{} sed -i "s/$ESCAPED_SECRET/***$key***/g" {}
	fi

[sam-golioth]

I think this is implied so we don't require it. We needed this before because we were using an if: always() directive, but now that's applied for the whole action instead of just the individual upload artifacts step.