ci,fix: Pin version of bicep-cli used by pre-commit

[kdestin]

Description

Bicep includes its version and a hash of the template as metadata
in the file produced when running `bicep build`. Different versions
of bicep-cli produce differing values for those fields, which
can break `pre-commit run --all` when run against changes that
don't touch any bicep files.

Pinning bicep-cli should keep those fields consistent until
bicep is intentionally upgraded.

Checklist

• I have read the contribution guidelines
• I have coordinated with the docs team (mldocs@microsoft.com) if this PR deletes files or changes any file names or file extensions.
• This notebook or file is added to the CODEOWNERS file, pointing to the author or the author's team.