build(deps): bump the github-actions group across 1 directory with 8 updates

.gitattributes

@@ -34,5 +34,3 @@ src/frontend/src/data/*.json merge=ours
 # Container image catalog is normalized (alphabetically sorted) and regenerated
 # from microsoft/aspire; pin to LF so Windows regeneration doesn't churn endings.
 src/frontend/src/data/container-images.json text eol=lf
-
-.github/workflows/*.lock.yml linguist-generated=true merge=ours

.github/forbidden-words.json

@@ -1,7 +1,6 @@
 {
   "$comment": "Forbidden words/phrases checked against newly added lines in pull requests by .github/scripts/check-forbidden-words.sh. Each rule has a regex 'pattern' (extended POSIX/PCRE, evaluated case-insensitively unless 'caseSensitive' is true), a required 'replacement' string, and a 'message' shown when matched. The check still fails when a forbidden phrase is found; in addition, .github/workflows/forbidden-words-suggest.yml posts an inline PR review 'suggestion' that rewrites the offending line by substituting each matched pattern with its 'replacement'. The 'replacement' value is inserted verbatim (matching honors 'caseSensitive', but the replacement text is never case-adjusted and does not support backreferences). Add 'excludePaths' globs to skip files for a specific rule.",
   "excludePaths": [
-    "**/*.lock.yml",
     "pnpm-lock.yaml",
     ".github/forbidden-words.json",
     ".github/scripts/check-forbidden-words.sh",