ci: bump google/osv-scanner from 1.9.0 to 1.9.1

Bumps [google/osv-scanner](https://github.com/google/osv-scanner) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/google/osv-scanner/releases)
- [Changelog](https://github.com/google/osv-scanner/blob/main/CHANGELOG.md)
- [Commits](google/osv-scanner@1386406...b13f37e)

---
updated-dependencies:
- dependency-name: google/osv-scanner
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

.github/workflows/osv-scanner.yml

@@ -12,4 +12,4 @@ permissions: read-all
 
 jobs:
   scan-pr:
-    uses: "google/osv-scanner/.github/workflows/osv-scanner-reusable-pr.yml@1386406b64edd4544696183f273139ef9298f5df"
+    uses: "google/osv-scanner/.github/workflows/osv-scanner-reusable-pr.yml@b13f37e1a1e4cb98556c1d34cd3256a876929be1"