ci: bump aquasecurity/trivy-action to v0.36.0

trivy-action v0.30.0 references aquasecurity/setup-trivy@v0.2.2 which has
been deleted upstream, causing all Trivy-based jobs to fail with:

  Unable to resolve action `aquasecurity/setup-trivy@v0.2.2`,
  unable to find version `v0.2.2`

v0.36.0 references setup-trivy@v0.2.6 (current).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: sarg3nt

.github/workflows/docker-agent.yml

@@ -99,7 +99,7 @@ jobs:
             BUILD_DATE=${{ github.event.repository.updated_at }}
 
       - name: Run Trivy image scan
-        uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30.0
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
         with:
           image-ref: gearbox-agent:scan
           format: 'sarif'

.github/workflows/docker.yml

@@ -99,7 +99,7 @@ jobs:
             BUILD_DATE=${{ github.event.repository.updated_at }}
 
       - name: Run Trivy image scan
-        uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30.0
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
         with:
           image-ref: gearbox:scan
           format: 'sarif'

.github/workflows/security.yml

@@ -75,7 +75,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30.0
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
         with:
           scan-type: 'fs'
           scan-ref: '.'