ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml

Bumps [complytime/org-infra/.github/workflows/reusable_security.yml](https://github.com/complytime/org-infra) from 0.3.1 to 0.4.0.
- [Release notes](https://github.com/complytime/org-infra/releases)
- [Changelog](https://github.com/complytime/org-infra/blob/main/CHANGELOG.md)
- [Commits](complytime/org-infra@2c19341...bbd7194)

---
updated-dependencies:
- dependency-name: complytime/org-infra/.github/workflows/reusable_security.yml
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/ci_security.yml

@@ -33,4 +33,4 @@ jobs:
       contents: read
       id-token: write
       security-events: write
-    uses: complytime/org-infra/.github/workflows/reusable_security.yml@2c193416adbc621a64021ace52bf57114d703888 # v0.3.1
+    uses: complytime/org-infra/.github/workflows/reusable_security.yml@bbd7194995388f96dd28c0c0792d406c8a249140 # v0.4.0