Add Missing `github-oidc-provider` Thumbprint
What
- include both thumbprints for GitHub OIDC
Why
- There are two possible intermediary certificates for the Actions SSL certificate and either can be returned by Github's servers, requiring customers to trust both. This is a known behavior when the intermediary certificates are cross-signed by the CA.