In openjs-foundation/cross-project-council#1009 (comment), @bensternthal offered to set up a virtual credit card to pay for GitHub Actions minutes in nodejs-private.
I think this would allow us to have continuity of service for the security releases.
On a similar note, @abbycabs has offered to bump up nodejs-private up into the waitlist to the large runners for private builds.
Should we move forward?