chore: update GitHub Action pins

[nikzen]

Summary

• Update GitHub Actions in workflows to the latest upstream default-branch commit SHAs.
• Keep existing action paths and only replace refs after @.

Verification

• Checked generated diff to include only .github/**/*.yml / .github/**/*.yaml workflow action refs.
• CI on this PR should validate the updated action versions.

[github-actions]

* c5218075c0921af073030825618713480ca9790e chore: update GitHub Action pins
|   - Error: Commit c5218075c0921af073030825618713480ca9790e is not signed
* 57b383862ba81dfa265bb33d492e2bbcbc96891d Revert "chore(docker): use clean_registry in step `Create manifest list and push`"
    - Trust root.

Failed to authenticate commits.

Error: Could not verify commits 57b383862ba81dfa265bb33d492e2bbcbc96891d..c5218075c0921af073030825618713480ca9790e

Caused by:
    0: While verifying commit c5218075c0921af073030825618713480ca9790e
    1: Commit c5218075c0921af073030825618713480ca9790e is not signed

[github-actions]

* 6a0f60e805d64201cfc644b378891d0132aaef5e chore: retrigger GitHub Actions
|   - Error: Commit 6a0f60e805d64201cfc644b378891d0132aaef5e is not signed
* c5218075c0921af073030825618713480ca9790e chore: update GitHub Action pins
|   - Error: Commit c5218075c0921af073030825618713480ca9790e is not signed
* 57b383862ba81dfa265bb33d492e2bbcbc96891d Revert "chore(docker): use clean_registry in step `Create manifest list and push`"
    - Trust root.

Failed to authenticate commits.

Error: 2 errors occurred while verifying the commits.  2 commits couldn't be authenticated.  Note: not all errors are fatal.  The first error is shown:

Caused by:
    0: Could not verify commits 57b383862ba81dfa265bb33d492e2bbcbc96891d..6a0f60e805d64201cfc644b378891d0132aaef5e
    1: While verifying commit 6a0f60e805d64201cfc644b378891d0132aaef5e
    2: Commit 6a0f60e805d64201cfc644b378891d0132aaef5e is not signed

[github-actions]

* b2e10f21dc09e5470c026f5497ec58204b7fc83f chore: update GitHub Action pins
|   - Error: Could not find a certificate with BDE15DDCE302F9E417F426D9A575DDEB3DB7D052 in the policy file
* 57b383862ba81dfa265bb33d492e2bbcbc96891d Revert "chore(docker): use clean_registry in step `Create manifest list and push`"
    - Trust root.

Failed to authenticate commits.

Error: Could not verify commits 57b383862ba81dfa265bb33d492e2bbcbc96891d..b2e10f21dc09e5470c026f5497ec58204b7fc83f

Caused by:
    0: While verifying commit b2e10f21dc09e5470c026f5497ec58204b7fc83f
    1: Could not find a certificate with BDE15DDCE302F9E417F426D9A575DDEB3DB7D052 in the policy file

[github-actions]

* 8ab6d29fd20c6e466b0ea59f099b5cd46065defc chore: update GitHub Action pins
|   - Error: Could not find a certificate with BDE15DDCE302F9E417F426D9A575DDEB3DB7D052 in the policy file
* b2e10f21dc09e5470c026f5497ec58204b7fc83f chore: update GitHub Action pins
|   - Error: Could not find a certificate with BDE15DDCE302F9E417F426D9A575DDEB3DB7D052 in the policy file
* 57b383862ba81dfa265bb33d492e2bbcbc96891d Revert "chore(docker): use clean_registry in step `Create manifest list and push`"
    - Trust root.

Failed to authenticate commits.

Error: 2 errors occurred while verifying the commits.  2 commits couldn't be authenticated.  Note: not all errors are fatal.  The first error is shown:

Caused by:
    0: Could not verify commits 57b383862ba81dfa265bb33d492e2bbcbc96891d..8ab6d29fd20c6e466b0ea59f099b5cd46065defc
    1: While verifying commit 8ab6d29fd20c6e466b0ea59f099b5cd46065defc
    2: Could not find a certificate with BDE15DDCE302F9E417F426D9A575DDEB3DB7D052 in the policy file