chore(deps): update jdx/packslip action to v1.9.1 (#15083)

This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [jdx/packslip](https://redirect.github.com/jdx/packslip) | action |
patch | `v1.9.0` → `v1.9.1` | `v1.11.1` (+3) |

---

### Release Notes

<details>
<summary>jdx/packslip</summary>

###
[`v1.9.1`](https://redirect.github.com/jdx/packslip/releases/tag/v1.9.1):
: Stop trusting compromised eMudhra intermediate CA certificates

[Compare
Source](https://redirect.github.com/jdx/packslip/compare/v1.9.0...v1.9.1)

packslip now ships an updated TLS trust store and certificate verifier.
The private keys for eight eMudhra intermediate CA certificates were
compromised, and this release stops trusting them. The manifest format
and verification rules have not changed.

##### Fixed

- Moved the bundled TLS trust material to the patched releases:
`rustls-webpki` 0.103.16 and `webpki-root-certs` 1.0.10. Browsers
already block the compromised eMudhra intermediates
([details](https://emudhra.we-have-a-problem.com/)), and the packslip
CLI and the `jdx/packslip` Action now reject HTTPS connections that
chain through them too. Connections that relied on those certificates
will now fail. If you use packslip as a library, the change only applies
to your own build once you run `cargo update -p rustls-webpki -p
webpki-root-certs`.
[#&#8203;246](https://redirect.github.com/jdx/packslip/issues/246)
([@&#8203;jdx](https://redirect.github.com/jdx))

**Full Changelog**:
<https://github.com/jdx/packslip/compare/v1.9.0...v1.9.1>

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Tuesday (`* * * * 2`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODguMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE4OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/release.yml

@@ -732,7 +732,7 @@ jobs:
       # writing it under packslip/, and an artifact holding files at two
       # depths keeps the directory, which the flat `sha256sum ./*` below
       # would then choke on.
-      - uses: jdx/packslip@2187c31f8317b8548833baf60cfe93db1f42431d # v1.9.0
+      - uses: jdx/packslip@693d02c49f6e1c8a0cc797472dc3fa53f0a6c955 # v1.9.1
         with:
           artifacts: release-assets/mise-*
           bin: mise
@@ -907,7 +907,7 @@ jobs:
           GH_REPO: ${{ github.repository }}
           TAG: ${{ needs.finish-draft-resolve.outputs.tag }}
         run: gh release upload "$TAG" mise.usage.kdl mise.bash mise.zsh mise.fish mise.powershell --clobber
-      - uses: jdx/packslip@2187c31f8317b8548833baf60cfe93db1f42431d # v1.9.0
+      - uses: jdx/packslip@693d02c49f6e1c8a0cc797472dc3fa53f0a6c955 # v1.9.1
         with:
           artifacts: release-assets/mise-*
           bin: mise