fix(ci): bump trivy-action to v0.36.0

v0.28.0 does not exist as a release tag; resolved to latest stable.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: 2 people

.github/workflows/release-engine.yml

@@ -71,7 +71,7 @@ jobs:
           echo "version=${TAG}" >> "$GITHUB_OUTPUT"
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.36.0
         with:
           image-ref: "ghcr.io/dvflw/mantle:${{ steps.vars.outputs.version }}"
           format: table