build: make toolchain inputs reproducible

.github/workflows/ci.yml

@@ -42,10 +42,6 @@ jobs:
 
           flutter pub get
 
-      - name: Install saf_util development dependencies
-        working-directory: packages/saf_util
-        run: flutter pub get
-
       - name: Verify generated files committed
         run: scripts/codegen.sh --check
 
@@ -55,8 +51,14 @@ jobs:
       - name: Verify workflow and script guards
         run: |
           python3 scripts/check_build_workflow.py
+          python3 scripts/check_apple_spm_locks.py
+          python3 scripts/test_check_apple_spm_locks.py
           python3 scripts/check_workflow_security.py
           python3 scripts/test_check_workflow_security.py
+          python3 scripts/check_workflow_action_pins.py
+          python3 scripts/test_check_workflow_action_pins.py
+          python3 scripts/test_check_codegen.py
+          python3 scripts/test_format_native.py
           python3 scripts/test_run_maestro.py
           python3 scripts/check_update_packages_workflow.py
           python3 scripts/test_pubspec_version.py