chore: bump actions to ratified manifest SHAs

[krukonshedul]

Manual rollout from actions-manifest's current ratified state (actions-maintenance.yaml not yet wired up in this repo).

• actions/checkout@34e1148 -> actions/checkout@3d3c42e
• step-security/harden-runner@9af89fc -> step-security/harden-runner@e14015d
• step-security/runs-on-cache@c5b0cba -> step-security/runs-on-cache@e61ed9b

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	step-security/​runs-on-cache@​c5b0cba15d05488ebc630ad8d1e95b3d9b35ac73 ⏵ e61ed9b0206c630e9a6bb5f12ca4cd78ae7bbe93	+8

View full report

[FreskimZ]

Approved.