[pull] latest from ag-grid:latest - #901

…ed host (#14940)

The check fetched `api.securityscorecards.dev`, the pre-OpenSSF hostname. Its CDN
edge is serving objects days past their 10-minute max-age, so the gate reported a
stale score that disagreed with the viewer.

Switch to `api.scorecard.dev` and add a cache-buster, since the new host has the
same 10-minute max-age and could go stale the same way. A `Cache-Control:
no-cache` request header does not help - the edge ignores it.

Also record the scan date in the CTRF message, so a stale read is visible in the
Slack notification rather than only in the GitHub step summary.

Mirrors the same change in ag-charts, so the ag-shared subrepo stays consistent.