fix(ci): pin trunk linter versions in lint.enabled

Unpinned `lint.enabled` entries resolve to the SYSTEM copy of a tool
(trunk logs `@ version:SYSTEM` and never downloads it), so every
trunk-managed tool failed with "Binary not found" on the runner. Pin
each tool to the version it is validated with on this repo:

- actionlint 1.7.8, black 25.9.0, prettier 3.6.2, ruff 0.16.2,
  mypy 2.1.0, taplo 0.10.0, shellcheck 0.10.0, yamllint 1.37.1,
  eslint 8.10.0, golangci-lint 2.6.1
- clippy/rustfmt 1.88.0 (rust toolchain; repo's rust-toolchain.toml
  pins channel = "stable", edition 2024 requires >= 1.85)

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>

Author: KooshaPari

.trunk/trunk.yaml

@@ -51,20 +51,22 @@ lint:
                 success_codes: [0, 101, 383]
                 disable_upstream: true
 
-    # Enabled tools (plugin defaults unless overridden above).
+    # Enabled tools (plugin defaults unless overridden above). Versions are
+    # pinned explicitly: an unpinned entry resolves to the SYSTEM copy of the
+    # tool instead of a trunk-managed install.
     enabled:
-        - actionlint
-        - black
-        - clippy
-        - eslint
-        - golangci-lint
-        - mypy
-        - prettier
-        - ruff
-        - rustfmt
-        - shellcheck
-        - taplo
-        - yamllint
+        - actionlint@1.7.8
+        - black@25.9.0
+        - clippy@1.88.0
+        - eslint@8.10.0
+        - golangci-lint@2.6.1
+        - mypy@2.1.0
+        - prettier@3.6.2
+        - ruff@0.16.2
+        - rustfmt@1.88.0
+        - shellcheck@0.10.0
+        - taplo@0.10.0
+        - yamllint@1.37.1
 
     # GitHub workflow files are covered by actionlint (syntax + shellcheck).
     # prettier's YAML printer re-indents `on:`-keyed workflow files with a