ci: pin setup-clang-tools + clang-tidy-diff to tagged SHA (#63)

Repin to the canonical anolishq/.github main SHA now that the
`setup-clang-tools` and `clang-tidy-diff` tags exist, so Renovate can
resolve their digests and heal future drift.

Refs anolishq/.github#80

Author: CameronBrooks11

.github/workflows/ci.yml

@@ -316,7 +316,7 @@ jobs:
         # SHA-verified static LLVM 18.1.8 clang-format on PATH — the org source of
         # truth, matching workstation-configs apps/clang-tools on dev boxes. See
         # anolishq/.github#69.
-        uses: anolishq/.github/.github/actions/setup-clang-tools@43a0fe0a7feb87215f6e7677133be542ef6f1031 # setup-clang-tools
+        uses: anolishq/.github/.github/actions/setup-clang-tools@9869a5f4bee7da9c7c1dc9bae033cd0137c4801d # setup-clang-tools
       - name: Check formatting
         run: git ls-files '*.c' '*.cc' '*.cpp' '*.cxx' '*.h' '*.hh' '*.hpp' '*.hxx' | xargs clang-format --dry-run --Werror
 

.github/workflows/clang-tidy.yml

@@ -25,7 +25,7 @@ jobs:
     # out of this g++ gate). The diagram tool links graphviz, hence apt-packages.
     # NB: it uses the default build/<preset> binaryDir — unlike ci-linux-release-
     # server (build-server/), which the gate's -path build/<preset> can't find.
-    uses: anolishq/.github/.github/workflows/clang-tidy-diff.yml@bc822a0e1a1638789ecd912e3761283084fe914a # clang-tidy-diff
+    uses: anolishq/.github/.github/workflows/clang-tidy-diff.yml@9869a5f4bee7da9c7c1dc9bae033cd0137c4801d # clang-tidy-diff
     with:
       # x64-linux (not the gate's x64-linux-static default) so we reuse the warm
       # vcpkg cache the server-enabled CI lane writes — its closure (grpc+protobuf