deps: Pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/ai-inference	action	pinDigest	→ 17ff458
actions/checkout	action	pinDigest	→ 34e1148
actions/github-script	action	pinDigest	→ f28e40c
actions/setup-python	action	pinDigest	→ a26af69
anthropics/claude-code-action	action	pinDigest	→ 787c5a0
codacy/codacy-analysis-cli-action	action	pinDigest	→ 562ee3e

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

This pull request successfully pins several GitHub Action dependencies to specific commit SHA digests across the project's workflows. This is a security best practice that prevents supply chain attacks and ensures reproducible build environments.

Codacy analysis indicates that the changes are up to standards, with no new issues or complexity increases. No critical security flaws or logic bugs were identified that would prevent merging.

Test suggestions

• Verify 'Claude Code Review' workflow triggers and executes using the pinned digests for checkout and claude-code-action.
• Verify 'Config drift check' workflow triggers and executes using the pinned digests for checkout, setup-python, and upload-artifact.
• Verify 'Triage Bot' workflow executes correctly using the pinned digest for github-script.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify 'Claude Code Review' workflow triggers and executes using the pinned digests for checkout and claude-code-action.
2. Verify 'Config drift check' workflow triggers and executes using the pinned digests for checkout, setup-python, and upload-artifact.
3. Verify 'Triage Bot' workflow executes correctly using the pinned digest for github-script.

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}