Aikido researchers found attackers abusing stolen GitHub accounts and automated workflows to steal valuable secrets.