[fix][ci] Pin approved docker GitHub Actions

[shibd]

Motivation

The PR validation workflow currently fails with startup_failure before any jobs start because ASF GitHub Actions policy blocks unapproved docker/* action tags.

Apache infrastructure now requires pinned SHAs from the approved allowlist instead of floating tags like @v2 and @v3.

Related references:

• https://github.com/apache/infrastructure-actions/blob/main/approved_patterns.yml
• https://github.com/apache/infrastructure-actions/blob/main/actions.yml
• [fix][ci] Disable trivy-action pulsar#25373

Modifications

Replace these action references in the Linux Docker build jobs with ASF-approved pinned SHAs:

• docker/setup-qemu-action@v2 -> docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392
• docker/setup-buildx-action@v2 -> docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f
• docker/build-push-action@v3 -> docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8

Updated workflows:

• ci-pr-validation.yml
• ci-build-release-napi.yml

Verification

• Confirmed the previous failing run had conclusion startup_failure and no jobs were created.
• Confirmed the repository no longer contains docker/setup-qemu-action@v2, docker/setup-buildx-action@v2, or docker/build-push-action@v3 in workflow files.

Documentation

• doc-not-needed