build(deps): bump the devops group with 2 updates

Bumps the devops group with 2 updates: [tj-actions/changed-files](https://github.com/tj-actions/changed-files) and [docker/scout-action](https://github.com/docker/scout-action).


Updates `tj-actions/changed-files` from 45.0.3 to 45.0.4
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@v45.0.3...v45.0.4)

Updates `docker/scout-action` from 1.15.0 to 1.15.1
- [Release notes](https://github.com/docker/scout-action/releases)
- [Commits](docker/scout-action@v1.15.0...v1.15.1)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: devops
- dependency-name: docker/scout-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: devops
...

Signed-off-by: dependabot[bot] <[email protected]>

.github/workflows/ci-lint.yml

@@ -44,7 +44,7 @@ jobs:
 
       - name: Rust files
         id: changed-files-rust
-        uses: tj-actions/[email protected].3
+        uses: tj-actions/[email protected].4
         with:
           files: |
             **/*.rs
@@ -56,7 +56,7 @@ jobs:
 
       - name: Workflow files
         id: changed-files-workflows
-        uses: tj-actions/[email protected].3
+        uses: tj-actions/[email protected].4
         with:
           files: |
             .github/workflows/*.yml

.github/workflows/sub-build-docker-image.yml

@@ -193,7 +193,7 @@ jobs:
         # - `dev` for a pull request event
       - name: Docker Scout
         id: docker-scout
-        uses: docker/[email protected].0
+        uses: docker/[email protected].1
         # We only run Docker Scout on the `runtime` target, as the other targets are not meant to be released
         # and are commonly used for testing, and thus are ephemeral.
         # TODO: Remove the `contains` check once we have a better way to determine if just new vulnerabilities are present.