[ci] bump checkout task to v3.5.0 to trust rotated GitHub SSH key

For details check actions/checkout#1237 and their blog post
https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/

Author: shawnfunke

.github/workflows/pr.yaml

@@ -13,7 +13,7 @@ jobs:
     steps:
 
     - name: Checkout Repository
-      uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+      uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
 
     - name: Use Node.JS 16.x
       uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0

.github/workflows/release.yaml

@@ -28,7 +28,7 @@ jobs:
     steps:
 
     - name: Checkout Repository
-      uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+      uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
 
     - name: Use Node.JS 16.x
       uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0