`yq` binary is downloaded without checking the binary signature

### Bug Description

When `yq` is installed the charm doesn't check the checksum of the downloaded file


### To Reproduce

See
https://github.com/canonical/github-runner-operator/blob/main/src/runner.py#L500-L507

### Environment

Any

### Relevant log output

```shell
N/A
```


### Additional context

_No response_