fix: bump default aislop-version 0.9.3 -> 0.12.0; recommend pinning

The stale 0.9.3 default scored repos differently from the current aislop CLI
that developers run locally, so local quality fixes never moved the badge.
Bump the default to a current release and document that consumers should pin
aislop-version explicitly for a deterministic, local-matching badge.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: dskvr

action.yml

@@ -12,9 +12,14 @@ inputs:
     required: false
     default: "."
   aislop-version:
-    description: aislop npm package version to run.
+    description: >-
+      aislop npm package version to run. Pin this in your workflow for a
+      deterministic badge — if you rely on this default, your badge score can
+      change whenever this default is bumped or (if set to a range) whenever a
+      new aislop is published, and it may differ from the version you run
+      locally.
     required: false
-    default: "0.9.3"
+    default: "0.12.0"
   package-runner:
     description: Package runner used to execute aislop. Supported values are npx, pnpm, and bunx.
     required: false