chore(actions)(deps): bump the actions group with 4 updates #271

Job	Run time
jscpd (duplication < 3% on touched code)	17s
Trivy (filesystem + container scan)	18s
Gitleaks (secret scan)	19s
OSV-Scanner (SCA)	10s
Semgrep (SAST)	23s
SBOM (SPDX + CycloneDX)	21s
	1m 48s

Provide feedback