Allowlist carabiner v1.2.0 transitive ampel-bootstrap + download-and-verify (#906)

The hourly "Check for transitive failures in current latest actions"
workflow has been failing on every scheduled run since the carabiner
v1.2.0 bump. `ampel/verify@v1.2.0` (e0e3b814) transitively resolves
`install/ampel-bootstrap` and `install/download-and-verify` at the same
v1.2.0 monorepo commit (e0e3b814), but only three of the five carabiner
sub-actions had that SHA allowlisted — these two were missed in the
v1.2.0 sync, so the run is blocked with "is not allowed in
apache/infrastructure-actions".

Add e0e3b814 to both sub-action blocks in actions.yml as allowlisted-but-
expiring transitive entries (the existing 9db1a064 stays the live,
dependabot-tracked ref, so the composite is unchanged) and regenerate
approved_patterns.yml via the gateway sync.

Generated-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: potiuk

actions.yml

@@ -182,6 +182,11 @@ carabiner-dev/actions/install/ampel-bootstrap:
   9db1a064ca5691ef6f5d983031739ca287de0968:
     expires_at: 2026-08-28
   b60791af41423360b892a1a3cee90cd4e131f381: {}
+  # transitive dep pulled by ampel/verify @ v1.2.0 (e0e3b814); allowlisted
+  # but not dependabot-tracked (b60791af above stays the live ref).
+  e0e3b8149dafed833431095bc148d50e7eade4e8:
+    tag: v1.2.0
+    expires_at: 2026-08-16
 carabiner-dev/actions/install/bnd:
   2a11d59a135c5e291f305f249a92ad7903e3ee0f:
     # transitive dep of carabiner-dev/actions/ampel/verify @ v1.2.0
@@ -203,6 +208,11 @@ carabiner-dev/actions/install/download-and-verify:
   9db1a064ca5691ef6f5d983031739ca287de0968:
     expires_at: 2026-08-28
   b60791af41423360b892a1a3cee90cd4e131f381: {}
+  # transitive dep pulled by ampel/verify @ v1.2.0 (e0e3b814); allowlisted
+  # but not dependabot-tracked (b60791af above stays the live ref).
+  e0e3b8149dafed833431095bc148d50e7eade4e8:
+    tag: v1.2.0
+    expires_at: 2026-08-16
 carloscastrojumo/github-cherry-pick-action:
   503773289f4a459069c832dc628826685b75b4b3:
     tag: v1.0.10

approved_patterns.yml

@@ -72,13 +72,15 @@
 - carabiner-dev/actions/install/ampel-bootstrap@0a075bb75a68646d05f99c85cbbf2be40dd8e442
 - carabiner-dev/actions/install/ampel-bootstrap@9db1a064ca5691ef6f5d983031739ca287de0968
 - carabiner-dev/actions/install/ampel-bootstrap@b60791af41423360b892a1a3cee90cd4e131f381
+- carabiner-dev/actions/install/ampel-bootstrap@e0e3b8149dafed833431095bc148d50e7eade4e8
 - carabiner-dev/actions/install/bnd@2a11d59a135c5e291f305f249a92ad7903e3ee0f
 - carabiner-dev/actions/install/bnd@e0e3b8149dafed833431095bc148d50e7eade4e8
 - carabiner-dev/actions/install/bnd@94f29392187fe5082d1195a7d4cae3a7ddf09d9c
 - carabiner-dev/actions/install/download-and-verify@2a11d59a135c5e291f305f249a92ad7903e3ee0f
 - carabiner-dev/actions/install/download-and-verify@6022a065d6420de5d86333ecfb2b25c57f84b699
 - carabiner-dev/actions/install/download-and-verify@9db1a064ca5691ef6f5d983031739ca287de0968
 - carabiner-dev/actions/install/download-and-verify@b60791af41423360b892a1a3cee90cd4e131f381
+- carabiner-dev/actions/install/download-and-verify@e0e3b8149dafed833431095bc148d50e7eade4e8
 - carloscastrojumo/github-cherry-pick-action@503773289f4a459069c832dc628826685b75b4b3
 - carlosperate/arm-none-eabi-gcc-action@*
 - check-spelling/check-spelling@*