RATIS-2588. (addendum) Tweak allowlist-check glob pattern to match .yaml files

[adoroszlai]

What changes were proposed in this pull request?

Addendum for RATIS-2588. Just noticed after merging #139 that the new workflow only checked zizmor.yml:

Checking 2 unique action ref(s) against the ASF allowlist:

  ✅ actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 — trusted owner (actions)  (.github/workflows/zizmor.yml)
  ✅ zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa — matches allowlist  (.github/workflows/zizmor.yml)
All 2 unique action refs are on the ASF allowlist

It turned out that allowlist-check only looks at .yml files by default, ignoring .yaml files.

https://github.com/apache/infrastructure-actions/blob/5d6d53e66c7f6f831d4fd0c8fd1a610054ed8a26/allowlist-check/action.yml#L29-L31

This PR configures the action to check both extensions. Also, rename zizmor.yml to .yaml to match naming convention.

https://issues.apache.org/jira/browse/RATIS-2588

How was this patch tested?

Before rename:

Checking 8 unique action ref(s) against the ASF allowlist:
  ✅ actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 — trusted owner (actions)  (.github/workflows/asf-allowlist-check.yaml, .github/workflows/reusable-check.yaml, .github/workflows/zizmor.yml)
  ✅ actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c — trusted owner (actions)  (.github/workflows/reusable-check.yaml)
  ✅ actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 — trusted owner (actions)  (.github/workflows/reusable-check.yaml)
  ✅ actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a — trusted owner (actions)  (.github/workflows/reusable-check.yaml, .github/workflows/reusable-check.yaml)
  ✅ apache/infrastructure-actions/allowlist-check@775350a154e610e84c460cb1bbe2d2ab26c15cb3 — trusted owner (apache)  (.github/workflows/asf-allowlist-check.yaml)
  ✅ apache/infrastructure-actions/stash/restore@2245ffcb262ea1723462729b032d1d5c71290dfc — trusted owner (apache)  (.github/workflows/reusable-check.yaml)
  ✅ apache/infrastructure-actions/stash/save@2245ffcb262ea1723462729b032d1d5c71290dfc — trusted owner (apache)  (.github/workflows/reusable-check.yaml)
  ✅ zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa — matches allowlist  (.github/workflows/zizmor.yml)
All 8 unique action refs are on the ASF allowlist

After rename:

Checking 8 unique action ref(s) against the ASF allowlist:

  ✅ actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 — trusted owner (actions)  (.github/workflows/asf-allowlist-check.yaml, .github/workflows/reusable-check.yaml, .github/workflows/zizmor.yaml)
  ✅ actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c — trusted owner (actions)  (.github/workflows/reusable-check.yaml)
  ✅ actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 — trusted owner (actions)  (.github/workflows/reusable-check.yaml)
  ✅ actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a — trusted owner (actions)  (.github/workflows/reusable-check.yaml, .github/workflows/reusable-check.yaml)
  ✅ apache/infrastructure-actions/allowlist-check@775350a154e610e84c460cb1bbe2d2ab26c15cb3 — trusted owner (apache)  (.github/workflows/asf-allowlist-check.yaml)
  ✅ apache/infrastructure-actions/stash/restore@2245ffcb262ea1723462729b032d1d5c71290dfc — trusted owner (apache)  (.github/workflows/reusable-check.yaml)
  ✅ apache/infrastructure-actions/stash/save@2245ffcb262ea1723462729b032d1d5c71290dfc — trusted owner (apache)  (.github/workflows/reusable-check.yaml)
  ✅ zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa — matches allowlist  (.github/workflows/zizmor.yaml)
All 8 unique action refs are on the ASF allowlist

[adoroszlai]

@szetszwo please take a look

[szetszwo]

+1 the change looks good.

[adoroszlai]

Thanks @szetszwo for the review.