fix(ci): repin SDK workflows to a current CI image

The SDK proto check and sync dashboard jobs pinned the CI container to
image tag 37072ee, which predates several mise.lock updates. Tools
baked into that image no longer satisfied the lockfile, so every run
re-downloaded go and yq from the GitHub release CDN and failed whenever
that CDN returned a transient error.

Repin to 5b9daab, the current CI image build, so mise install resolves
entirely from the baked toolchain. The pin stays an explicit tag to keep
the zizmor unpinned-images rule satisfied.

Signed-off-by: Ignas Baranauskas <ibaranau@redhat.com>

Author: Ygnas

.github/workflows/sdk-proto-check.yml

@@ -50,7 +50,7 @@ jobs:
     runs-on: linux-amd64-cpu8
     timeout-minutes: 15
     container:
-      image: ghcr.io/nvidia/openshell/ci:37072ee81cd7b294c714bfa5ecc829b6927b3d70
+      image: ghcr.io/nvidia/openshell/ci:5b9daab9351b1e053f9a5e0ce4c899f5d3f674b0
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/sdk-sync-dashboard.yml

@@ -38,7 +38,7 @@ jobs:
     runs-on: linux-amd64-cpu8
     timeout-minutes: 30
     container:
-      image: ghcr.io/nvidia/openshell/ci:37072ee81cd7b294c714bfa5ecc829b6927b3d70
+      image: ghcr.io/nvidia/openshell/ci:5b9daab9351b1e053f9a5e0ce4c899f5d3f674b0
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
@@ -94,7 +94,7 @@ jobs:
       issues: write
       packages: read
     container:
-      image: ghcr.io/nvidia/openshell/ci:37072ee81cd7b294c714bfa5ecc829b6927b3d70
+      image: ghcr.io/nvidia/openshell/ci:5b9daab9351b1e053f9a5e0ce4c899f5d3f674b0
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}