ci: harden action pinning lint (#1545)

* ci: harden action pinning lint

* refactor: extract dockview review dialog slot

* test: cover action pinning edge cases

* fix: reject dynamic workflow action sources

* fix: normalize quoted workflow action refs

* test: cover quoted unpinned action refs

---------

Co-authored-by: root <root@kandev.ts.net>

.github/workflows/lint-action-pinning.yml

@@ -6,11 +6,13 @@ on:
     paths:
       - ".github/workflows/**"
       - ".github/scripts/lint-action-pinning.py"
+      - ".github/scripts/lint-action-pinning_test.py"
   pull_request:
     branches: [main]
     paths:
       - ".github/workflows/**"
       - ".github/scripts/lint-action-pinning.py"
+      - ".github/scripts/lint-action-pinning_test.py"
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -31,5 +33,8 @@ jobs:
         with:
           persist-credentials: false
 
+      - name: Test action-pinning lint
+        run: python3 .github/scripts/lint-action-pinning_test.py
+
       - name: Verify action refs
         run: python3 .github/scripts/lint-action-pinning.py