ci: bump lock-threads to v6 to fix token validation failure

[simpleqt]

Problem

The scheduled Lock Threads workflow fails on every run — most recently run 35478525947 (2026-09-20) and each preceding execution.

##[error]"github-token" length must be less than or equal to 100 characters long

v5 of the action validates the github-token input with a 100-character cap, but the automatically-injected GITHUB_TOKEN now exceeds that length, so the action rejects its default input and closed threads are no longer being locked.

Upstream fixed the validation schema in v6.0.2 ("update github-token validation schema", closes dessant/lock-threads#55).

Fix

Bump dessant/lock-threads v5 → v6. The inputs used in this workflow are unchanged in v6, so lock behaviour stays the same once the workflow runs again.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ simpleqt
❌ 金豆

---

金豆 seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[simpleqt]

Friendly status note: the CLA has been signed for this account (the CLA assistant page for this PR shows "You have agreed to the CLA"), but the license/cla check has been stuck in "pending" for about two weeks despite fresh pushes triggering re-runs. If a maintainer could nudge or re-run the check, the PR should be clear to review. Thanks!