🧪 ✨ use in-house packages for PDF & image handling - #443

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}