Switch frizbee workflow to CLI instead of Docker action

The frizbee-action Docker image (v0.0.5) bundles an older version of
frizbee that flags cosmetic comment differences as unpinned. Install
the CLI (v0.1.8) directly for consistent behavior with local runs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: tashian

.github/workflows/frizbee.yml

@@ -12,10 +12,17 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
+      - name: Install frizbee
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: |
+          gh release download v0.1.8 --repo stacklok/frizbee \
+            --pattern 'frizbee_0.1.8_linux_amd64.tar.gz' \
+            --output frizbee.tar.gz
+          tar -xzf frizbee.tar.gz frizbee
+          sudo mv frizbee /usr/local/bin/
+          rm frizbee.tar.gz
       - name: Check pinning
-        uses: stacklok/frizbee-action@c7009cdb455a69ae0dab0c37f296e0f545b4211c # v0.0.5
         env:
           GITHUB_TOKEN: ${{ github.token }}
-        with:
-          open_pr: false
-          fail_on_unpinned: true
+        run: frizbee actions --dry-run --error .github/workflows/