chore(ci): pin apt-cache action and rotate cache key

`@latest` is a moving tag, so a broken upstream release rolls into CI
unreviewed — v1.6.2 shipped broken and was superseded three days later.
Pin to v1.6.3 by SHA.

Bump the cache `version` to rotate the key: a 6 KB entry had been saved
under the old one, which the action restored as a hit and then skipped
installing libglib2.0-dev, failing rust-check and ts-check on every branch.

Author: Mohammod Al Amin Ashik

.github/actions/install-linux-deps/action.yml

@@ -13,18 +13,20 @@ runs:
   using: composite
   steps:
     # Cache apt packages to avoid re-downloading on every run
+    # Pinned to a SHA: `@latest` is a moving tag, so a broken upstream release
+    # (e.g. v1.6.2) would otherwise roll straight into CI unreviewed.
     - name: Cache apt packages (base)
-      uses: awalsh128/cache-apt-pkgs-action@latest
+      uses: awalsh128/cache-apt-pkgs-action@553a35bb8ebd9fcabcb1c9451aa4c98e1b4ca8a9 # v1.6.3
       with:
         packages: build-essential pkg-config libglib2.0-dev libgtk-3-dev libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf libsecret-1-dev libfuse2
-        version: 1.1
+        version: 1.2
 
     - name: Cache apt packages (E2E)
       if: ${{ inputs.e2e == 'true' }}
-      uses: awalsh128/cache-apt-pkgs-action@latest
+      uses: awalsh128/cache-apt-pkgs-action@553a35bb8ebd9fcabcb1c9451aa4c98e1b4ca8a9 # v1.6.3
       with:
         packages: webkit2gtk-driver xvfb gnome-keyring gsettings-desktop-schemas dbus-x11 at-spi2-core libglib2.0-bin libwayland-server0 libwayland-client0
-        version: 1.3
+        version: 1.4
 
     # Compile gsettings schemas (required after restore from cache)
     - name: Compile gsettings schemas