fix: resolve setup-android error, upgrade all actions

[tlobbregt]

Summary

• Upgrades all GitHub Actions across the CodeQL, dependency-review, and dependency-submission workflows to their latest versions, pinned by SHA (actions/checkout v7.0.1, actions/setup-java v6.0.1, github/codeql-action v4.38.0, actions/dependency-review-action v5.0.0, gradle/actions/dependency-submission v6.3.0, actions/cache v6.1.0, actions/setup-node v7.0.0, android-actions/setup-android v4.0.3, advanced-security/filter-sarif v1.1).
• Fixes the setup-android failure by bumping it to v4.0.3 and switching distribution: adopt → temurin in setup-java (Eclipse Temurin replaced AdoptOpenJDK as the maintained distribution).
• Replaces the deprecated CODEQL_ACTION_SARIF_RESULTS_OUTPUT_DIR env var with steps.codeql.outputs.sarif-output, matching the new codeql-action output convention.
• Removes the unused permissions: contents: read / statuses: write block from the commit-status composite action (composite actions don't consume workflow-level permissions).
• Adds show-patched-versions, retry-on-snapshot-warnings, and retry-on-snapshot-warnings-timeout options to both dependency-review workflows to reduce

Test

• https://github.com/braintree/braintree_android/actions/runs/35271481759/job/105371706603?pr=1709

[JLESUS]

Love these QoL fixes, LGTM 🚀