ci(deps): update actions/checkout digest to de0fac2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout (changelog)	action	digest	8e8c483 → de0fac2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	1		0	0	0.07s
✅ ANSIBLE	ansible-lint	yes		no	no	26.25s
✅ COPYPASTE	jscpd	yes		no	no	1.6s
✅ EDITORCONFIG	editorconfig-checker	1		0	0	0.03s
✅ REPOSITORY	devskim	yes		no	no	1.6s
✅ REPOSITORY	dustilock	yes		no	no	0.02s
✅ REPOSITORY	gitleaks	yes		no	no	6.59s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	44.03s
✅ REPOSITORY	kics	yes		no	no	30.28s
✅ REPOSITORY	kingfisher	yes		no	no	6.83s
✅ REPOSITORY	secretlint	yes		no	no	1.06s
✅ REPOSITORY	syft	yes		no	no	2.44s
✅ REPOSITORY	trivy	yes		no	no	12.11s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.6s
✅ REPOSITORY	trufflehog	yes		no	no	6.41s
✅ YAML	v8r	1		0	0	2.46s
✅ YAML	yamllint	1		0	0	0.13s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff