A broken action.lock file causes it to be ignored

I was surprised dependabot was able to suddenly update my actions without workflows failing, turned out I had somehow pushed a broken action lock file:

https://github.com/jessehouwing/actions-semver-checker/blob/7de219d45de803f9febd8e3fd564cb55e0e30f5f/.github/workflows/actions.lock

I'd expect this to fail when a workflow runs, but it just runs without ANY issues.

https://github.com/jessehouwing/actions-semver-checker/actions/runs/34647263399

Start by reproducing the behavior with the broken .github/workflows/actions.lock file in the linked actions-semver-checker commit and review workflow run 34647263399. Trace how gh-actions-lock validates or consumes malformed lockfiles, then add coverage for this case. Done means a broken lockfile is detected and the workflow fails instead of silently ignoring it.

Written by the indexing model from the issue text.