build(deps): Bump workflows to latest trusted versions

[hashicorp-tsccr[bot]]

Bumping GitHub Actions version to latest TSCCR release.

• changes in .github/workflows/ci.yml
  • bump actions/setup-go from v5.3.0 to v5.4.0 (release notes)

This PR was auto-generated by security-tsccr/actions/runs/14165157097

You can alter the configuration of this automation via the hcl config in security-tsccr/automation

This PR can be regenerated by dispatching the GitHub workflow Pin Action Refs. Please reach out to #team-prodsec if you have any questions.