ci: bump action-shellcheck to v2.0.0 to silence set-output deprecation

Prior pin (94e0aab) was tagged v2.0.0 in comment but is actually the v1.1.0
SHA, which uses the deprecated ::set-output GitHub Actions command. Upgrade
to the real v2.0.0 SHA (00cae500) which writes to $GITHUB_OUTPUT and adds
ignore_names / ignore_paths inputs alongside the legacy ignore.

Co-Authored-By: claude-flow <ruv@ruv.net>

Author: fidgetcoding

.github/workflows/lint.yml

@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - name: Run ShellCheck
-        uses: ludeeus/action-shellcheck@94e0aab03ca135d11a35e5bfc14e6746dc56e7e9 # v2.0.0
+        uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # v2.0.0
         with:
           scandir: '.'
           severity: warning

.github/workflows/security.yml

@@ -18,7 +18,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - name: Run ShellCheck at error severity
-        uses: ludeeus/action-shellcheck@94e0aab03ca135d11a35e5bfc14e6746dc56e7e9 # v2.0.0
+        uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # v2.0.0
         with:
           scandir: '.'
           severity: error