chore(CLS-493): pin GitHub Actions to SHA and migrate community forks

Pin actions to immutable SHA references and replace community actions
with StepSecurity-maintained forks per CLS-493.

- Pinned 3 actions to SHA with exact version comments
- Replaced 0 community actions with StepSecurity forks
- Vendor actions (docker/*, hashicorp/*, etc.) pinned but NOT replaced
- Internal actions (miroapp-dev/*) left as-is with original tags

Author: JubbaSmail

.github/workflows/addCommentToRemindUpdatingTemplateVersion.yml

@@ -14,7 +14,7 @@ jobs:
       hasAutoDetectionComment: ${{ steps.job1.outputs.hasAutoDetectionComment }}
     steps:
       - name: Find Comment
-        uses: step-security/find-comment@v4
+        uses: step-security/find-comment@1d7bf2a0c1b6802305aa3cf2e7c0e47568915caf # v4.0.0
         id: fc
         with:
           issue-number: ${{ github.event.pull_request.number }}

.github/workflows/convertKqlFunctionYamlToArmTemplate.yaml

@@ -91,7 +91,7 @@ jobs:
             repository: ${{github.event.pull_request.head.repo.full_name}}
             branch: ${{ github.head_ref }}
       - name: Add comment
-        uses: step-security/add-pr-comment@v2
+        uses: step-security/add-pr-comment@7e5d2dd3955e34b109b939fa0b654ea502caf590 # v2.8.4
         if: ${{ env.armTemplatesChanged == 'true' }}
         with:
           message: |

.github/workflows/update-solutions-analyzer.yml

@@ -58,7 +58,7 @@ jobs:
       - name: Create Pull Request
         if: steps.check_changes.outputs.changed == 'true'
         id: create_pr
-        uses: step-security/create-pull-request@v8
+        uses: step-security/create-pull-request@e604d57b37b404d8bb34d152fa905e45d003a895 # v8.1.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: 'chore: Update Solutions Analyzer CSV files and documentation'