chore(deps): update all non-major github action dependencies

[renovate[bot]]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v3.5.3 -> v3.6.0
actions/checkout	action	minor	v3.5.2 -> v3.6.0
actions/checkout	action	digest	f43a0e5 -> 3df4ab1
github/codeql-action	action	patch	v2.21.4 -> v2.21.5
ossf/scorecard-action	action	digest	bfa3f0d -> 15cd9b9

Review

• [ ] Updates have been tested and work
• [ ] If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

---

Release Notes

actions/checkout (actions/checkout)

### [`v3.6.0`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) [Compare Source](https://togithub.com/actions/checkout/compare/v3.5.3...v3.6.0) - [Fix: Mark test scripts with Bash'isms to be run via Bash](https://togithub.com/actions/checkout/pull/1377) - [Add option to fetch tags even if fetch-depth > 0](https://togithub.com/actions/checkout/pull/579)

github/codeql-action (github/codeql-action)

### [`v2.21.5`](https://togithub.com/github/codeql-action/compare/v2.21.4...v2.21.5) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.4...v2.21.5)

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Montreal, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[patheard]

• https://github.com/cds-snc/platform-core-services/issues/447