DEVOPS-1133: Pin GitHub Actions to commit hashes

[RomFloreani]

DEVOPS-1133 - pin all GitHub actions and reusable workflows to hash
Expands moving GitHub Actions tags to the full semver tag pointing at the same commit, then pins every uses: to a commit hash with a dependabot-readable version comment.

Tags expanded in this repo:

• MiraGeoscience/CI-tools/.github/workflows/reusable-jira-issue_to_jira.yml@v3 -> @v3.12.0
• MiraGeoscience/CI-tools/.github/workflows/reusable-jira-pr_actions.yml@v3 -> @v3.12.0
• MiraGeoscience/CI-tools/.github/workflows/reusable-python-static_analysis.yml@v3 -> @v3.12.0
• MiraGeoscience/CI-tools/.github/workflows/reusable-python-pytest.yml@v3 -> @v3.12.0

Workflows added:

• .github/workflows/dependabot-auto-merge.yml
• .github/workflows/wip-status.yml

All MiraGeoscience/CI-tools reusable workflows are pinned to 7241532854727d993872b67fc761139b8438615b (v3.12.0).

[Copilot]

Pull request overview

This PR updates this repository’s GitHub Actions reusable-workflow references to target MiraGeoscience/CI-tools at v3.9.1, aligning with the stated goal of moving off the broader v3 tag.

Changes:

• Updated Python analysis workflow to use v3.9.1 for static analysis and pytest reusable workflows.
• Updated JIRA-related workflows to use v3.9.1 for PR actions and issue-to-JIRA automation.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File	Description
.github/workflows/python_analysis.yml	Bumps reusable Python CI workflow references from @v3 to @v3.9.1.
.github/workflows/pr_jira_actions.yml	Bumps reusable JIRA PR actions workflow reference from @v3 to @v3.9.1.
.github/workflows/issue_to_jira.yml	Bumps reusable JIRA issue creation workflow reference from @v3 to @v3.9.1.

Comments suppressed due to low confidence (1)

.github/workflows/python_analysis.yml:34

• PR description says every uses: should be pinned to a commit hash with a dependabot-readable version comment, but this still references the moving v3.9.1 tag. Pin to the underlying commit SHA and keep the tag in a trailing comment for update tooling.

    uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-pytest.yml@v3.9.1

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

⚠️ Force push detected - Previous Copilot review comments may no longer be relevant to the current code. Please resolve any outdated threads and re-request a Copilot review when ready.

[github-actions]

⚠️ Force push detected - Previous Copilot review comments may no longer be relevant to the current code. Please resolve any outdated threads and re-request a Copilot review when ready.