Bump FdwVersion to 2.2.3 (FDW security release for CVE-2026-41889) (#…

…4996)

Bump pipe-fittings to v2.9.1 to fix GHCR plugin install auth error (#…

…4982)

pipe-fittings v2.9.1 adds an anonymous retry to OCI pulls when stored
GHCR credentials (from ~/.docker/config.json) are rejected. Without
this, an expired or revoked PAT causes 'steampipe plugin install' to
fail with an opaque 403 even when the image is publicly pullable.

Also updates cloud.bats acceptance test fixtures (AWS account
632902152528 / alias 'nagraj-aaa' → 097350876455 / 'turbot-silverwater')
to match the current turbot-ops/clitesting workspace state.

Harden GitHub Actions: pin actions to SHAs and set explicit permissio…

…ns (#4965) (#4975)

(cherry picked from commit 0722f84)

Co-authored-by: cbruno10 <cody@turbot.com>

v2.4.0

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

v2.3.6

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

v2.3.5

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Fixed deadlocks on adding connections

Fix db client deadlocks with non-blocking cleanup and RW locks