chore(deps): update dependency opentofu to v1.12.3

[renovate]

This PR contains the following updates:

Package	Update	Change
opentofu	patch	1.12.2 → 1.12.3

---

Release Notes

opentofu/opentofu (opentofu)

v1.12.3

Compare Source

BUG FIXES:

• Properly handle TF_ENCRYPTION with only blank spaces. (#​4265)
• The value resulted from the lifecycle.enabled evaluation now has its deprecation marks processed correctly (#​4162)
• Update documentation to clarify the usage restriction of ephemeral values in lifecycle.enabled. (#​4220)
• tofu console -lock=false now works as intended. (#​4291)

SECURITY ADVISORIES:

• Previous releases in the v1.12 series could read an arbitrary file during certain git operations via a maliciously crafted URL (#​4293)
  • Advisory: GHSA-q7j3-v8qv-22vq

Full Changelog: opentofu/opentofu@v1.12.2...v1.12.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on tuesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[immich-push-o-matic]

Preview Deployments (9c9a100)

Worker	Preview URL
github-approval-check	https://github-approval-check.pr-77.dev.immich.app
hello	https://hello.pr-77.dev.immich.cloud
version	https://version.pr-77.dev.immich.cloud