ci(deps): bump actions/github-script from 7 to 9

Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 9.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v9)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/kolmbench-submission.yml

@@ -116,7 +116,7 @@ jobs:
 
       - name: Comment validation result on PR
         if: always()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const body = `${{ steps.validate.outputs.result_md }}`;

.github/workflows/sbom.yml

@@ -73,7 +73,7 @@ jobs:
       # for clean vuln-free runs (would spam the tracker).
       - name: open tracking issue on sbom failure
         if: steps.cdx.outcome == 'failure'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const title = `SBOM emission failed on ${context.sha.slice(0,7)}`;