Megalodon: Mass GitHub Repo Backdooring via CI Workflows