[BXMSPROD-2064] set untrusted input as intermediate env variable

[lampajr]

JIRA: https://issues.redhat.com/browse/BXMSPROD-2064

referenced Pull Requests:

• [BXMSPROD-2064] set untrusted input as intermediate env variable kiegroup/kie-ci#1514
• https://github.com/kiegroup/kogito-pipelines/pull/999
• [BXMSPROD-2064] set untrusted input as intermediate env variable kiegroup/droolsjbpm-build-bootstrap#2321

As suggested here: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable setting untrusted input as env variable

NOTE: even if we are planning to remove composite actions from this repo I would like to apply the change also here even if it will be needed for short time

[radtriste]

So putting them as env variable will remove the fact that it could be executed code ?

[lampajr]

So putting them as env variable will remove the fact that it could be executed code ?

yeah exactly, this is the first suggestion from GitHub doc.
I already make a test locally and it worked as expected.