Pin apache/infrastructure-actions allowlist-check to a released tag

The action was pinned to a hash carrying a '# main' comment, which zizmor's
online ref-version-mismatch audit flags (a branch is not a version). Pin to the
released allowlist-check/v1.0.0 tag, matching main (#70623). This was the last
static-check failure on the 3.3.2 sync PR after the ruff/mypy restore (#73046).

Author: vatsrahul1001

.github/workflows/asf-allowlist-check.yml

@@ -31,4 +31,5 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: apache/infrastructure-actions/allowlist-check@ec1b354a0455b41001d77473236d02a0ee0adba4  # main
+      # yamllint disable-line rule:line-length
+      - uses: apache/infrastructure-actions/allowlist-check@61dcea11f19e2bbe1263f14d72235e8da17d3ad0  # allowlist-check/v1.0.0