chore(deps): pin dependencies (#4968)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [GuillaumeFalourd/branch-exists](https://github.com/GuillaumeFalourd/branch-exists) | action | pinDigest |  → `0092904` |
| [actions/cache](https://github.com/actions/cache) | action | pinDigest |  → `6682284` |
| [actions/checkout](https://github.com/actions/checkout) | action | pinDigest |  → `de0fac2` |
| [actions/setup-node](https://github.com/actions/setup-node) | action | pinDigest |  → `53b8394` |
| [azure/k8s-set-context](https://github.com/azure/k8s-set-context) | action | pinDigest |  → `ae59a72` |
| [azure/setup-helm](https://github.com/azure/setup-helm) | action | pinDigest |  → `1a275c3` |
| docker.io/postgres |  | pinDigest |  → `44d837e` |
| dxflrs/garage |  | pinDigest |  → `45a61ce` |
| [favonia/cloudflare-ddns](https://github.com/favonia/cloudflare-ddns) |  | pinDigest |  → `a4e2089` |
| [ghcr.io/0xerr0r/blocky](https://github.com/0xERR0R/blocky) |  | pinDigest |  → `a6d99f3` |
| ghcr.io/ai-dock/stable-diffusion-webui |  | pinDigest |  → `bc4b2b1` |
| [ghcr.io/dmunozv04/isponsorblocktv](https://github.com/dmunozv04/iSponsorBlockTV) |  | pinDigest |  → `5458565` |
| ghcr.io/gabe565/castsponsorskip |  | pinDigest |  → `f556d27` |
| [ghcr.io/gethomepage/homepage](https://github.com/gethomepage/homepage) |  | pinDigest |  → `b129cb0` |
| ghcr.io/moghtech/komodo-periphery |  | pinDigest |  → `bd79cf9` |
| [ghcr.io/renovatebot/renovate](https://renovatebot.com) ([source](https://github.com/renovatebot/renovate)) | container | pinDigest |  → `9228574` |
| [ghcr.io/tailscale/tailscale](https://tailscale.com/kb/1282/docker) ([source](https://github.com/tailscale/tailscale)) |  | pinDigest |  → `95e5287` |
| ghcr.io/tailscale/tailscale |  | pinDigest |  → `95e5287` |
| [ghcr.io/tecnativa/docker-socket-proxy](https://github.com/Tecnativa/docker-socket-proxy) |  | pinDigest |  → `1f3a6f3` |
| [ghcr.io/traefik/traefik](https://hub.docker.com/_/traefik) ([source](https://github.com/traefik/traefik-library-image)) |  | pinDigest |  → `acfc806` |
| [gitea/gitea](https://github.com/go-gitea/gitea) |  | pinDigest |  → `f846d26` |
| khairul169/garage-webui |  | pinDigest |  → `17c7935` |
| ollama/ollama |  | pinDigest |  → `5a5d014` |
| quay.io/prometheus/node-exporter |  | pinDigest |  → `337ff1d` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #4968
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

.gitea/workflows/render-manifests.yaml

@@ -31,32 +31,32 @@ jobs:
       (github.event_name == 'pull_request' && github.event.pull_request.merged == true)
     steps:
       - name: Checkout Main
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           path: infrastructure
           fetch-depth: 0
 
       - name: Checkout Manifests
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: manifests
           path: infrastructure-manifests
 
       - name: Set Up Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           version: v3.17.2 # Pending https://github.com/helm/helm/pull/30743
           cache: true
 
       - name: Configure Kubeconfig
-        uses: azure/k8s-set-context@v4
+        uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
 
       - name: Cache Helm Dependencies
-        uses: actions/cache@v5
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
         with:
           path: |
             ~/.cache/helm