[PRP-286] Pin to infra CI to checkov latest release (v2.3.194)

[rocketnova]

Ticket

https://wicmtdp.atlassian.net/browse/PRP-286

Changes

What was added, updated, or removed in this PR.

• Pin CI checkov check to latest checkov release (v2.3.194)

Context for reviewers

Testing instructions, background context, more in-depth details of the implementation, and anything else you'd like to call out or ask reviewers. Explain how the changes were verified.

Right now we’re doing infra checks against checkov@main and it’s a little bit chaos because every PR has a chance of randomly failing against brand new checkov checks. This PR pins to a specific version and https://wicmtdp.atlassian.net/browse/PRP-287 will handle updating to a future latest version.

There is currently no way to specify the checkov version to the checkov-action. See open issue: bridgecrewio/checkov-action#41

So, instead, this PR pins to:

• Latest released version of checkov is v2.3.194
• Latest matching release version of checkov-action is v12.2296.0

Testing

Screenshots, GIF demos, code examples or output to help show the changes working as expected. ProTip: you can drag and drop or paste images into this textbox.

See passing CI check at: https://github.com/navapbc/wic-participant-recertification-portal/actions/runs/4789903100/jobs/8518320846?pr=67