chore(deps): pin dependencies (#10)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action | pinDigest |  -> `8e8c483` |
| [azure/k8s-deploy](https://github.com/azure/k8s-deploy) | action | pinDigest |  -> `6f7c489` |
| [azure/k8s-lint](https://github.com/azure/k8s-lint) | action | pinDigest |  -> `6aefe50` |
| [azure/k8s-set-context](https://github.com/azure/k8s-set-context) | action | pinDigest |  -> `ae59a72` |
| [azure/setup-helm](https://github.com/azure/setup-helm) | action | pinDigest |  -> `1a275c3` |
| [azure/setup-kubectl](https://github.com/azure/setup-kubectl) | action | pinDigest |  -> `776406b` |
| [helmfile/helmfile-action](https://github.com/helmfile/helmfile-action) | action | pinDigest |  -> `f64d5db` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xMC41IiwidXBkYXRlZEluVmVyIjoiNDIuMTAuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYWN0aW9uIiwiZGVwcyJdfQ==-->

Reviewed-on: #10
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.gitea/workflows/cd.yaml

@@ -41,7 +41,7 @@ jobs:
       has_helmfile: ${{ steps.check-helmfile.outputs.exists }}
       has_k8s: ${{ steps.check-k8s.outputs.exists }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
       - name: Check if helmfile.yaml exists
         id: check-helmfile
         run: |
@@ -68,15 +68,15 @@ jobs:
     needs: detect-service-type
     if: needs.detect-service-type.outputs.has_k8s == 'true'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           ref: ${{ inputs.deploy_branch }}
       - uses: ./.gitea/actions/extract-namespace-from-repo-name
         id: namespace
         with:
           repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@v4
-      - uses: azure/k8s-set-context@v4
+      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
+      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -104,7 +104,7 @@ jobs:
             echo "No custom secrets to create"
           fi
       - name: Deploy Kubernetes manifests
-        uses: azure/k8s-deploy@v5.0.4
+        uses: azure/k8s-deploy@6f7c489cecd8da05646259d9fa3daae92e095c7b # v5.0.4
         with:
           action: deploy
           manifests: "${{ inputs.k8s_dir }}"
@@ -119,16 +119,16 @@ jobs:
       needs.detect-service-type.outputs.has_k8s == 'true' && 
       inputs.skip_helm_deployment != 'true'
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           ref: ${{ inputs.deploy_branch }}
       - uses: ./.gitea/actions/extract-namespace-from-repo-name
         id: namespace
         with:
           repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@v4
-      - uses: azure/setup-helm@v4
-      - uses: azure/k8s-set-context@v4
+      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
+      - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
+      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -156,7 +156,7 @@ jobs:
             echo "No custom secrets to create"
           fi
       - name: Deploy Helm
-        uses: helmfile/helmfile-action@v2
+        uses: helmfile/helmfile-action@f64d5db9f8660aae0205b5fcfc56577d44acefab # v2
         with:
           helmfile-args: apply