ci: Update GitHub Actions workflows

[evansims]

This PR makes the following GitHub Actions workflow changes:

• It pins the golangci/golangci-lint-action, codecov/codecov-action and goreleaser/goreleaser-action third-party action to full-length commit SHAs of their latest releases.

  Pinning an action to a full-length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository. https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions

• Adds a pull-request-target.trigger-deferred.yml workflow to capture the pull_request_target event and mitigate security concerns about environmental secret access by forked pull requests. https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

  Combining the pull_request_target workflow trigger with an explicit checkout of an untrusted PR is a dangerous practice that may lead to repository compromise.

• Updated semgrep.yml to run as a deferred workflow and removed the pull_request_target event trigger. I removed the conditionals around skipping Dependabot and Snykbot checks, as this resolves the permissions issue those conditions were implemented for as a workaround.

• Bumps goreleaser/goreleaser-action from v3 to v4. I could not identify any breaking changes, but please review and make alterations as necessary.

[codecov-commenter]

Codecov Report

Patch and project coverage have no change.

Comparison is base (2f4e29e) 72.07% compared to head (db6bd87) 72.07%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #779   +/-   ##
=======================================
  Coverage   72.07%   72.07%           
=======================================
  Files          89       89           
  Lines       11156    11156           
=======================================
  Hits         8041     8041           
  Misses       2613     2613           
  Partials      502      502           

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.