chore(deps): pin dependencies in .github/workflows/release.yml

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pinDigest	-> a5ac7e5
docker/bake-action	action	pinDigest	-> 8497071
docker/setup-buildx-action	action	pinDigest	-> f95db51
docker/setup-qemu-action	action	pinDigest	-> 6882732
golangci/golangci-lint-action	action	pinDigest	-> a4f60bb
sigstore/cosign-installer	action	pinDigest	-> e1523de

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.