chore(deps): bump actions/github-script from 7 to 9 (#151)

Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 9.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v9)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/cert-pin-watch.yml

@@ -68,7 +68,7 @@ jobs:
 
     - name: Open a tracking issue on drift
       if: failure()
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       env:
         # Passed via env (not ${{ }} interpolation) so the report text can
         # never break out of the script — workflow-injection-safe pattern.