chore: pin actions (release-2.10) (#4000)

Actions need to be pinned on SHA version. Partially taken from
https://github.com/kumahq/kuma/blob/release-2.10/.github/workflows/lifecycle.yml

Seems like the versions of `acorn` were not synced between manifest and
lock-file:

```sh
...
npm error Invalid: lock file's acorn@8.14.0 does not satisfy acorn@8.15.0
...
```

so I bumped the version in the lock-file.

---------

Signed-off-by: schogges <moritz.fleck@konghq.com>

Author: schogges

.github/workflows/lifecycle.yml

@@ -15,7 +15,7 @@ permissions:
 
 jobs:
   lifecycle:
-    uses: kumahq/.github/.github/workflows/wfc_lifecycle.yml@main
+    uses: kumahq/.github/.github/workflows/wfc_lifecycle.yml@f98e381472c34234ecdaa4f26d72996d55d16759
     permissions:
       issues: write # for editing issues (e.g. adding labels)
     with:

.github/workflows/on-dependabot-pr.yml

@@ -15,7 +15,7 @@ jobs:
     if: github.event.pull_request.user.login == 'dependabot[bot]'
     runs-on: ubuntu-latest
     steps:
-      - uses: dependabot/fetch-metadata@v2
+      - uses: dependabot/fetch-metadata@08eff52bf64351f401fb50d4972fa95b9f2c2d1b
         id: metadata
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"