DEVOPS-1939 - Pin actions to main

[vgrassia]

Type of change

- [ ] Bug fix
- [ ] New feature development
- [ ] Tech debt (refactoring, code cleanup, dependency upgrades, etc)
- [X] Build/deploy pipeline (DevOps)
- [ ] Other

Objective

This PR pins the bitwarden/gh-actions/get-keyvault-secrets actions to main.

Code changes

• .github/workflows/publish-php.yml: Pin all uses of bitwarden/gh-actions/get-keyvault-secrets to main.

Before you submit

• Please add unit tests where it makes sense to do so

[github-actions]

Checkmarx One – Scan Summary & Details – 8c173170-d3a8-4ef8-ab65-15061cd33c6e

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Unpinned Actions Full Length Commit SHA	/publish-php.yml: 89	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 60.66%. Comparing base (38b4d25) to head (c4ea0d1).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #717   +/-   ##
=======================================
  Coverage   60.66%   60.66%           
=======================================
  Files         173      173           
  Lines       10628    10628           
=======================================
  Hits         6447     6447           
  Misses       4181     4181           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.