Pin runner image to specific version to decouple from GitHub updates

Signed-off-by: Martin Schurz <[email protected]>

.github/workflows/release.yml

@@ -11,7 +11,7 @@ jobs:
   generate_changelog:
     name: create release draft
     if: github.repository == 'dev-sec/ansible-collection-hardening'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with: