BUILD-11571: Pin check-sca version with better vault-error-output

[bwalsh434]

Follow up to #300 so that this newly committed to master version of check-sca gets used in this repo as well as all of the other repos via the org ruleset.

Test Plan

• After merging this PR, make another test commit to https://github.com/SonarSource/dbd-ir-interpreter/pull/10 and ensure this newer version of the check-sca action gets picked up

[hashicorp-vault-sonar-prod]

BUILD-11571

[gitar-bot]

Code Review ✅ Approved

Pins the check-sca action version to incorporate improved Vault error messaging. No issues found.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

Updates the repository’s SCA verification workflow to use the newly committed check-sca action revision (follow-up to PR #300), ensuring improved Vault-auth failure output is picked up here and via the org ruleset.

Changes:

• Bump the pinned SonarSource/ci-github-actions/check-sca action SHA to a newer commit on master.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.