Enable immutable releases on sonarsource/sonarqube-scan-action

This action should enable immutable releases to help protect users against potential attacks such as GHSA-mrrh-fwg8-r2c3 and GHSA-69fq-xp46-6x23 by preventing re-pointing (released) tags to different commits.