chore(deps): pin trusted workflows based on HashiCorp TSCCR (#3346)

Bumping GitHub Actions version to latest TSCCR release.

* changes in `.github/workflows/lock.yml`
- bump `dessant/lock-threads` from `v5.0.0` to `v5.0.1` ([release
notes](https://github.com/dessant/lock-threads/releases/tag/v5.0.1))

_This PR was auto-generated by
[security-tsccr/actions/runs/7163563136](https://github.com/hashicorp/security-tsccr/actions/runs/7163563136)_

_You can alter the configuration of this automation via the hcl config
in
[security-tsccr/automation](https://github.com/hashicorp/security-tsccr/tree/main/automation)_

_Please reach out to #team-prodsec if you have any questions._
[](hashicorp/security-tsccr#193)

Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>

.github/workflows/lock.yml

@@ -12,7 +12,7 @@ jobs:
   lock:
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/lock-threads@d42e5f49803f3c4e14ffee0378e31481265dda22 # v5.0.0
+      - uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 # v5.0.1
         with:
           issue-comment: >
             I'm going to lock this issue because it has been closed for 30 days. This helps our maintainers find and focus on the active issues.