ci: fix corrupted OpenSSF Scorecard action pin

The pinned commit SHA for ossf/scorecard-action did not exist — the tail of
the hash was mangled (a bad paste), so the workflow failed at setup with
'unable to find version'. Pin the verified commit for the current v2.4.3
release instead.

Author: fgogolli

.github/workflows/scorecard.yml

@@ -28,7 +28,7 @@ jobs:
           persist-credentials: false
 
       - name: Run OpenSSF Scorecard
-        uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75b3f5e0ba  # v2.4.1
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a  # v2.4.3
         with:
           results_file: scorecard-results.sarif
           results_format: sarif