build(deps): Bump workflows to latest trusted versions

[hashicorp-tsccr[bot]]

Bumping GitHub Actions version to latest TSCCR release.

• changes in .github/workflows/pulls.yml
  • bump actions/setup-node from v4.2.0 to v4.3.0 (release notes)
  • bump actions/setup-go from v5.3.0 to v5.4.0 (release notes)
  • bump actions/upload-artifact from v4.6.0 to v4.6.2 (release notes)
  • bump actions/download-artifact from v4.1.8 to v4.2.1 (release notes)
  • bump actions/setup-node from v4.2.0 to v4.3.0 (release notes)
• changes in .github/workflows/test.yml
  • bump actions/setup-node from v4.2.0 to v4.3.0 (release notes)
  • bump actions/setup-go from v5.3.0 to v5.4.0 (release notes)

This PR was auto-generated by security-tsccr/actions/runs/14438633978

You can alter the configuration of this automation via the hcl config in security-tsccr/automation

This PR can be regenerated by dispatching the GitHub workflow Pin Action Refs. Please reach out to #team-prodsec if you have any questions.