ci(licenses): quote the GitHub output writes

Five `>> $GITHUB_OUTPUT` redirects in this workflow were left unquoted, which
shellcheck flags as SC2086 and which master already cleared everywhere else
ahead of enabling the rule.

Author: BridgeAR

.github/workflows/update-3rdparty-licenses.yml

@@ -42,20 +42,20 @@ jobs:
           BASE_REPO: ${{ github.repository }}
         run: |
           set -e
-          echo "head_oid=${{ github.event.pull_request.head.sha }}" >> $GITHUB_OUTPUT
+          echo "head_oid=${{ github.event.pull_request.head.sha }}" >> "$GITHUB_OUTPUT"
 
           if git diff --ignore-space-at-eol --exit-code LICENSE-3rdparty.csv; then
             echo "✅ LICENSE-3rdparty.csv is already up to date"
-            echo "needs_update=false" >> $GITHUB_OUTPUT
+            echo "needs_update=false" >> "$GITHUB_OUTPUT"
           else
             echo "📝 LICENSE-3rdparty.csv was modified by the regen script"
-            echo "needs_update=true" >> $GITHUB_OUTPUT
+            echo "needs_update=true" >> "$GITHUB_OUTPUT"
           fi
 
           if [[ "$PR_USER_TYPE" == "Bot" ]] && [[ "$PR_HEAD_REPO" == "$BASE_REPO" ]]; then
-            echo "is_bot_same_repo=true" >> $GITHUB_OUTPUT
+            echo "is_bot_same_repo=true" >> "$GITHUB_OUTPUT"
           else
-            echo "is_bot_same_repo=false" >> $GITHUB_OUTPUT
+            echo "is_bot_same_repo=false" >> "$GITHUB_OUTPUT"
           fi
 
       - name: Upload updated LICENSE-3rdparty.csv