Bumps the github-actions group with 3 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner), [bazelbuild/continuous-integration](https://github.com/bazelbuild/continuous-integration) and [github/codeql-action](https://github.com/github/codeql-action).

Closes #23820.

PiperOrigin-RevId: 681412302
Change-Id: I06837d15c72c2c337760b5b8e30d1773fc81fcf7