ci(workflow): pin scrutinizer action to commit SHA for security

Replace @latest with @9dcc96ca4b3cbada8b96f80e155acf2bf186b75c to comply with GitHub security requirements that mandate pinning actions to full-length commit SHA

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>

Author: vitormattos

.github/workflows/phpunit-sqlite-coverage.yml

@@ -133,7 +133,7 @@ jobs:
         run: composer run test:coverage
 
       - name: Upload Scrutinizer coverage
-        uses: sudo-bot/action-scrutinizer@latest
+        uses: sudo-bot/action-scrutinizer@e7b8e19a30b41be2aeba1c09ae4674cf5011c20a # latest
         if: github.repository == 'nextcloud/twofactor_gateway'
         with:
             cli-args: >