ci: pin github-script to v9 SHA in ci workflow

Author: Copilot

.github/workflows/ci.yml

@@ -165,7 +165,7 @@ jobs:
       contents: read
     steps:
       - name: Trigger smoke-copilot workflow for PR
-        uses: actions/github-script@v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             await github.rest.actions.createWorkflowDispatch({
@@ -184,7 +184,7 @@ jobs:
       actions: write
     steps:
       - name: Trigger smoke-copilot workflow
-        uses: actions/github-script@v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             await github.rest.actions.createWorkflowDispatch({
@@ -203,7 +203,7 @@ jobs:
       actions: write
     steps:
       - name: Trigger large-payload-tester workflow
-        uses: actions/github-script@v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             await github.rest.actions.createWorkflowDispatch({
@@ -222,7 +222,7 @@ jobs:
       actions: write
     steps:
       - name: Trigger language-support-tester workflow
-        uses: actions/github-script@v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             await github.rest.actions.createWorkflowDispatch({