ci: pin ic-wasm to 0.9.10 (#578)

## Summary

Pin `ic-wasm` to a specific version (`0.9.10` — the latest published on
crates.io) in the `check-canister-wasm-endpoints` job. Without a version
pin, the install resolves to the latest release at CI run time, so a
future `ic-wasm` release can silently change the meaning of the check on
an unrelated PR.

Author: gregorydemay

.github/workflows/ci.yml

@@ -95,7 +95,7 @@ jobs:
       - name: 'Install `ic-wasm`'
         uses: taiki-e/install-action@80e6af7a2ec7f280fffe2d0a9d3a12a9d11d86e9 # v2.75.1
         with:
-          tool: ic-wasm
+          tool: ic-wasm@0.9.10
 
       - name: 'Check canister endpoints'
         run: |