Extend actions/unpinned-tag to analyze composite action metadata (action.yml / action.yaml)

Extend actions/unpinned-tag to analyze composite action metadata (action.yml / action.yaml) #11167