Update Scorecard actions versions and apply Zizmor offline findings

[christophwille]

https://github.com/woodruffw/zizmor found the following problem across the board (offline mode):

17 |       - uses: actions/checkout@v4
   |  _______-
18 | |       with:
19 | |         submodules: true
   | |________________________- does not set persist-credentials: false

Also fixed are old versions in Scorecard.yml