Replace mutable tag references with immutable commit SHAs in codeql-analysis.yml and check-dist.yml to prevent supply chain attacks. Actions pinned: - actions/checkout@v6.0.2 - github/codeql-action/init@v4 - github/codeql-action/autobuild@v4 - github/codeql-action/analyze@v4 - actions/setup-node@v6.3.0 - actions/upload-artifact@v7.0.0 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>