ci: update plugin scanner actions

[TerminallyLazy]

Summary

• update actions/checkout from v4.3.1 to v7.0.1 using the immutable release commit
• update the HOL plugin scanner action from v1.2.404 to v1.2.532 using the immutable release commit
• apply both Dependabot updates against current v0.14 package validation to avoid their stale-branch conflict

Validation

• sh scripts/validate-plugin.sh
• git diff --check
• PR HOL scanner workflow

Supersedes #4 and #6.

High-level PR Summary

This PR updates GitHub Actions dependencies in the HOL plugin scanner workflow by upgrading actions/checkout from v4.3.1 to v7.0.1 and the hashgraph-online/ai-plugin-scanner-action from v1.2.404 to v1.2.532, both using immutable commit SHAs. These updates consolidate two separate Dependabot PRs (#4 and #6) to avoid stale-branch conflicts.

⏱️ Estimated Review Time: 5-15 minutes

💡 Review Order Suggestion

Order	File Path
1	.github/workflows/hol-plugin-scanner.yml

[qodo-code-review]

Qodo reviews are paused for this user.

Troubleshooting steps vary by plan Learn more →

On a Teams plan?
Reviews resume once this user has a paid seat and their Git account is linked in Qodo.
Link Git account →

Using GitHub Enterprise Server, GitLab Self-Managed, or Bitbucket Data Center?
These require an Enterprise plan - Contact us
Contact us →