chore(deps): update github/codeql-action action to v3.28.9

Author: renovate[bot]

.github/workflows/zizmor.yaml

@@ -41,7 +41,7 @@ jobs:
           GH_TOKEN: ${{ github.token }}
       - name: Upload SARIF report to GitHub
         if: always()
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
         with:
           category: zizmor
           sarif_file: results.sarif