chore: sdk update
fix: pin CI tooling, isolate SDK publish credentials and refuse dot-s… …egment path params (#303)