CI: Pin github/codeql-action/upload-sarif to commit hash

The v3 tag currently points to v3.34.1 which is
ebcb5b36de.

https://github.com/github/codeql-action/releases/tag/v3.34.1

.github/actions/windows-analysis/action.yaml

@@ -84,7 +84,7 @@ runs:
           ${{ github.workspace }}/analysis.plog.sarif
 
     - name: Upload PVS-Studio Report
-      uses: github/codeql-action/upload-sarif@v3
+      uses: github/codeql-action/upload-sarif@ebcb5b36ded6beda4ceefea6a8bc4cc885255bb3
       with:
         sarif_file: "${{ github.workspace }}/analysis.plog.sarif"
         category: 'PVS-Studio (Windows)'

.github/workflows/analyze-project.yaml

@@ -129,7 +129,7 @@ jobs:
           popd
 
       - name: Upload SARIF report files 📦
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@ebcb5b36ded6beda4ceefea6a8bc4cc885255bb3
         with:
           sarif_file: "${{ github.workspace }}/analytics/merged.sarif"
           category: 'clang-analyze (macOS Apple Silicon)'