ci: harden action pinning lint (#1545)

* ci: harden action pinning lint

* refactor: extract dockview review dialog slot

* test: cover action pinning edge cases

* fix: reject dynamic workflow action sources

* fix: normalize quoted workflow action refs

* test: cover quoted unpinned action refs

---------

Co-authored-by: root <root@kandev.ts.net>

Makefile

@@ -419,6 +419,7 @@ test-cli:
 .PHONY: test-scripts
 test-scripts:
 	@printf "$(CYAN)Running script tests...$(RESET)\n"
+	@python3 .github/scripts/lint-action-pinning_test.py
 	@bash scripts/pr-state.test.sh
 	@bash scripts/opencode-code-review.test.sh
 	@python3 scripts/opencode-code-review.test.py