ci(shared): bump vendored ci files

[galoybot-app]

Bump Shared Tasks

This PR syncs in this repository, shared CI tasks from concourse-shared.

---

Note

Low Risk
CI-only vendir bump and action version pin; no application runtime or security-sensitive logic changes.

Overview
Syncs vendored shared CI from galoy-concourse-shared to commit 8aaee2b (merge of fix/spelling-typos-action), updating ci/vendir.yml and ci/vendir.lock.yml for both the workflow vendor tree and ci/vendor.

The vendored spelling workflow now pins crate-ci/typos@v1 instead of @master in .github/workflows/spelling.yml and the mirrored vendor copy, so spell-check runs against a fixed action release rather than a moving branch.

^{Reviewed by Cursor Bugbot for commit c50afdb. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

📊 Performance Report

Commit: c50afdb
Updated: 2026-09-19 12:51:31 UTC

Cala Performance Benchmark Results (non-representative)

Criterion Benchmark Results (single-threaded)

Benchmark	Time per Run	Throughput	% vs Baseline
post_simple_transaction	3.131ms	319 tx/s	0 (baseline)
post_multi_layer_transaction	2.974ms	336 tx/s	+5.0%
post_simple_transaction_with_effective_balances	5.076ms	196 tx/s	-62.0%
post_simple_transaction_with_skipped_velocity	2.376ms	420 tx/s	+24.0%
post_simple_transaction_with_velocity	4.134ms	241 tx/s	-32.0%
post_simple_transaction_with_hit_velocity	1.413ms	707 tx/s	+54.0%
post_simple_transaction_with_one_account_set	2.845ms	351 tx/s	+9.0%
post_simple_transaction_with_five_account_sets	3.449ms	289 tx/s	-10.0%
post_simple_transaction_with_ec_account_set	2.564ms	390 tx/s	+18.0%

Load Testing Results (parallel-execution)

Scenario	tx/s
1 parallel	232.24
2 parallel	364.79
5 parallel	502.84
10 parallel	455.41
20 parallel	479.30
2 contention	279.71
5 contention	256.94
2 acct_sets	197.12
5 acct_sets	197.09

---

Note: Performance results may vary based on system resources and database state.

Last updated by commit c50afdb