fix(ci): pin actions to SHAs and fix K9 formats

Author: hyperpolymath

.machine_readable/svc/k9/panic-attacker-metadata.k9.ncl

@@ -7,6 +7,8 @@ K9!
 
 {
   pedigree = {
+    name = "panic-attacker-metadata.k9.ncl",
+    security = { leash = 'Yard },
     schema_version = "1.0.0",
     component_type = "security-tool-metadata",
     security = {
@@ -17,7 +19,7 @@ K9!
       allow_subprocess = false,
     },
     metadata = {
-      name = "panic-attacker-metadata",
+      
       version = "2.1.0",
       description = "panic-attack: universal static analysis and bug signature detection — project invariants",
       author = "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>",

generated/k9iser/cargo-manifest.k9

@@ -6,7 +6,9 @@ K9!
 [must]
 package.name : string {
   pedigree = {
-    security = { leash = "Yard" }, schema_version = "1.0.0", name = "cargo-manifest.k9" }, == 'panic-attack' }
+    name = "cargo-manifest.k9",
+    security = { leash = "Yard" },
+     schema_version = "1.0.0",  }, == 'panic-attack' }
 package.edition : string { == '2021' }
 profile.release.codegen-units : string { == 1 }
 profile.release.strip : string { == 'symbols' }

generated/k9iser/container-build.k9

@@ -6,7 +6,9 @@ K9!
 [must]
 metadata.license : string {
   pedigree = {
-    security = { leash = "Yard" }, schema_version = "1.0.0", name = "container-build.k9" }, == 'MPL-2.0' }
+    name = "container-build.k9",
+    security = { leash = "Yard" },
+     schema_version = "1.0.0",  }, == 'MPL-2.0' }
 metadata.registry : string { == 'ghcr.io/hyperpolymath' }
 build.runtime : string { == 'podman' }
 layers.base.verify : bool { == true }