chore(deps): update github actions

[ferrlabs-renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/setup-buildx-action (changelog)	action	digest	37fe631 → f87e599
docker/setup-qemu-action (changelog)	action	digest	1f40c72 → 9901266
github/codeql-action (changelog)	action	digest	b96794f → 1c5b675
kindest/node	uses-with	minor	v1.32.2 → v1.37.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[ferrfleet]

Three changes: digest bumps for docker/setup-qemu-action and docker/setup-buildx-action (both stay on v4, no tag change), and kindest/node v1.32.2 → v1.37.0 in .github/workflows/e2e.yml.

The node image bump is worth calling out as a positive: go.mod pins k8s.io/api, k8s.io/client-go, k8s.io/apimachinery all at v0.37.0, so the e2e cluster was previously running 5 minors behind the client library version skew the operator is built against. This bump actually removes an existing version mismatch rather than introducing one.

No API usage in this repo is affected by either docker action's digest-only update. CI is still finishing at review time (kind smoke test, CI/Test, CI/Lint, opengrep in progress), but everything that has completed so far is green and nothing points at these three lines.

Nothing blocking.

[github-actions]

SonarQube — aucune nouvelle issue

_{Comparaison entre le projet bac à sable de cette PR et la branche par défaut : SonarQube Community n'analyse pas les PR, ce delta est calculé côté CI. Détail}