ci(actionlint): run actionlint 1.7.12 in the hygiene job

1.7.7 does not know the hosted Arm Windows runner and reported windows-11-arm as an unknown label.
1.7.12 is the latest release and the version nixpkgs gives `just lint`, so the hygiene job and a
local run now agree.

.github/workflows/ci.yaml

@@ -95,7 +95,7 @@ jobs:
         run: |
           files=$(git ls-files '.github/workflows/*.yaml' ':!:.github/workflows/windows.yaml')
           # shellcheck disable=SC2086
-          docker run --rm -v "$PWD:/repo" --workdir /repo rhysd/actionlint:1.7.7 -color $files
+          docker run --rm -v "$PWD:/repo" --workdir /repo rhysd/actionlint:1.7.12 -color $files
       - name: shellcheck
         run: |
           files=(scripts/linux/wsl2-probe.sh)