build(deps): bump the actions group with 2 updates

Bumps the actions group with 2 updates: [octo-sts/action](https://github.com/octo-sts/action) and [chainguard-dev/actions](https://github.com/chainguard-dev/actions).


Updates `octo-sts/action` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/octo-sts/action/releases)
- [Commits](octo-sts/action@a26b0c6...d6c70ad)

Updates `chainguard-dev/actions` from 1.5.4 to 1.5.7
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Changelog](https://github.com/chainguard-dev/actions/blob/main/.goreleaser.yml)
- [Commits](chainguard-dev/actions@7b18ea9...1b32103)

---
updated-dependencies:
- dependency-name: octo-sts/action
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: chainguard-dev/actions
  dependency-version: 1.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

.github/workflows/regen-answers.yaml

@@ -24,7 +24,7 @@ jobs:
 
     - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
-    - uses: octo-sts/action@a26b0c6455c7f13316f29a8766287f939e75f6c8 # v1.0.2
+    - uses: octo-sts/action@d6c70ad3b9ac85df6da6b9749014d7283987cfec # v1.0.3
       id: octo-sts
       with:
         scope: ${{ github.repository }}
@@ -55,7 +55,7 @@ jobs:
         echo "create_pr_update=true" >> $GITHUB_OUTPUT
 
     # Configure signed commits
-    - uses: chainguard-dev/actions/setup-gitsign@7b18ea9960f945cabf19a84752e580829347f4ed # v1.5.4
+    - uses: chainguard-dev/actions/setup-gitsign@1b32103f5aa389c31ab0be75a8edc38d7e4750d8 # v1.5.7
       if: ${{ steps.check-diff.outputs.create_pr_update == 'true' }}
 
     # Based on usage in https://github.com/chainguard-dev/digestabot/blob/main/action.yml