chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ASzc/change-string-case-action	action	pinDigest	-> d0603cd
EyeCantCU/cosign-action	action	pinDigest	-> 11f8c11
actions/checkout	action	pinDigest	-> 692973e
actions/download-artifact	action	pinDigest	-> 65a9edc
actions/upload-artifact	action	pinDigest	-> 6546280
docker/login-action	action	pinDigest	-> 0d4c9c5
docker/metadata-action	action	pinDigest	-> 8e5442c
ghcr.io/ublue-os/bluefin-cli	stage	pinDigest	-> 09f092c
google-github-actions/release-please-action	action	pinDigest	-> e4dc86b
jasonn3/build-container-installer	action	pinDigest	-> 9253108
jlumbroso/free-disk-space	action	pinDigest	-> 54081f1
redhat-actions/buildah-build	action	pinDigest	-> 7a95fa7
redhat-actions/push-to-registry	action	pinDigest	-> 5ed88d2
sigstore/cosign-installer	action	pinDigest	-> 59acb62
ublue-os/just-action	action	pinDigest	-> 961e70e
ublue-os/kernel-signer	action	pinDigest	-> ba1d525
ublue-os/remove-unwanted-software	action	pinDigest	-> 517622d

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[p5]

Blocking merge

Don't merge yet, we need to leave builders open for m2's bootc merge