ci: Use hash for codeql-action/upload-sarif Action

[nschonni]

Description

Swap the Action to use a git SHA like the other actions

Motivation and Context

Was one of the hardening steps we took for the the other Actions, seems like this one got skipped due to the the PR being in flight when the others changed.

Testing Details

Example Output(if appropriate)

Types of changes

• Documentation
• Version change (Update, remove or add more Node.js versions)
• Variant change (Update, remove or add more variants, or versions of variants)
• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Other (none of the above)

Checklist

• My code follows the code style of this project.
• My change requires a change to the documentation.
• I have updated the documentation accordingly.
• I have read the CONTRIBUTING.md document.
• All new and existing tests passed.

[yosifkit]

👍 https://github.com/github/codeql-action/releases/tag/v4.31.4