chore: ci security

[reez]

Description

4 errors https://github.com/bitcoindevkit/bdkpython/actions/runs/16426385912

I believe these are both related to repository structure differences from bdk-ffi where workflows ran in a bdk-python/ subdir with working-dir set, whereas bdkpython runs at the repo root.

Solves 1 with this error https://github.com/bitcoindevkit/bdkpython/actions/runs/16426385912/job/46417589940

Adding git config --global --add safe.directory tells git to trust the specific repository directory

Solves 3 with this error https://github.com/bitcoindevkit/bdkpython/actions/runs/16426385912/job/46417589886

Changing to submodules: recursive makes sure all submodules and nested submodules are properly initialized and checked out during the workflow

Notes to the reviewers

Changelog notice

Checklists

All Submissions:

• I've signed all my commits
• I followed the contribution guidelines
• I ran cargo fmt and cargo clippy before committing

New Features:

• I've added tests for the new feature
• I've added docs for the new feature

Bugfixes:

• This pull request breaks the existing API
• I've added tests to reproduce the issue which are now passing
• I'm linking the issue being fixed by this PR

[thunderbiscuit]

ACK 24b72b8.