chore: Update validate-pr action to latest version (#5241)

Updates the pinned SHA to pick up the bot allowlist fix, which
prevents trusted bots (dependabot, renovate, etc.) from being
closed by the PR validation workflow.

#skip-changelog

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>