fix: support checking out action ref in composite actions

[panicboat]

Why

In composite actions (label-dispatcher and label-resolver), actions/checkout for deploy-actions didn't specify a ref, causing it to always checkout the latest commit from the default branch (main). This broke caller workflows whenever breaking changes were merged to main before or without releasing, and bypassed commit/tag pinning on caller workflows.

This PR:

• Adds an optional deploy-actions-ref input (defaulting to empty).
• Passes ${{ inputs.deploy-actions-ref || github.action_ref }} to the deploy-actions checkout step, ensuring composite actions checkout the ref/tag/SHA pinned by the caller by default, while allowing explicit override.
• Adds deploy-actions-repository input to label-resolver for consistency with label-dispatcher.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: bb66da9a-fc7a-4a6a-a395-69379a3525c1

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}