chore(deps): pin googleapis/release-please-action to SHA

[mvillmow]

Pins the release-please-action to a specific commit SHA for supply-chain security, following the pattern used by other workflows in the repository.

Closes #368

[github-actions]

✅ Dependency Audit

Severity	Count
Critical	0
High	0
Medium	0
Low	0

See the Security tab for detailed findings.

---

Workflow: Dependency Audit

[github-actions]

Security Scan Results

• ❌ Secret Scanning: Potential secrets found
• ✅ SAST: Completed (check Security tab for details)
• ✅ Dependency Scanning: Completed
• ✅ C++ Static Analysis: Completed
• ✅ Docker Image Scanning: 0 high, 22 medium vulnerabilities (acceptable)

Recommendations

• Review findings in the GitHub Security tab
• Check artifact uploads for detailed reports
• Address critical Docker vulnerabilities immediately

---

Workflow: Security Scanning