fix(ci): bump a2ml/k9-validate-action pins to canonical (#19) #5

Job	Run time
governance / Code quality + docs	10s
governance / Guix primary / Nix fallback policy	6s
governance / Security policy checks	6s
governance / Language / package anti-pattern policy	5s
governance / Well-Known (RFC 9116 + RSR)	3s
governance / Workflow security linter	4s
	34s

Provide feedback