[WIP] Fix template injection error in sync-actions.yml (#9)

* Initial plan

* fix: prevent template injection by passing inputs.ref via env var in sync-actions.yml

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Author: Copilot

.github/workflows/sync-actions.yml

@@ -86,7 +86,7 @@ jobs:
           echo "::group::Resolving Ref"
 
           # Determine raw ref from event inputs
-          RAW_REF="${{ inputs.ref }}"
+          RAW_REF="${INPUT_REF}"
 
           # Default to 'latest' if empty
           if [[ -z "$RAW_REF" ]]; then
@@ -187,6 +187,7 @@ jobs:
           echo "::endgroup::"
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          INPUT_REF: ${{ inputs.ref }}
 
       - name: Checkout gh-aw-actions (this repository)
         uses: actions/checkout@v4