Downgrade upload-sarif@v4 -> v3

I got ahead of myself; v4 hasn't been tagged yet.

Author: mario-campos

.github/workflows/pr-checks.yml

@@ -72,7 +72,7 @@ jobs:
         run: npm run lint-ci
 
       - name: Upload sarif
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v3
         if: matrix.os == 'ubuntu-latest'
         with:
           sarif_file: eslint.sarif