Use ast-grep GitHub action and pin versions
This uses the official ast-grep GitHub Action [0] instead of installing it from npm in the clippy job.
Thanks for the suggestion from @HerringtonDarkholme!
[0] https://github.com/ast-grep/action
[1] https://github.com/vercel/turbo/pull/5637#issuecomment-1666751193
