chore(deps): pin dependencies

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
1password/load-secrets-action	action	pinDigest	-> 13f58ee
actions/checkout	action	pinDigest	-> 08c6903
actions/setup-python	action	pinDigest	-> a26af69
azure/setup-helm	action	pinDigest	-> 1a275c3
docker/build-push-action	action	pinDigest	-> 2634353
docker/login-action	action	pinDigest	-> 184bdaa
docker/metadata-action	action	pinDigest	-> c1e5197
github/codeql-action	action	pinDigest	-> 192325c
helm/chart-testing-action	action	pinDigest	-> 0d28d31
helm/kind-action	action	pinDigest	-> a1b0e39
lefthook	dependencies	pin	^1.13.0 -> 1.13.0
namespacelabs/nscloud-checkout-action	action	pinDigest	-> 953fed3
python	uses-with	pin	3.x -> 3.13.7
yaml (source)	dependencies	pin	^2.8.1 -> 2.8.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.