Bump drupal/core-vendor-hardening from 10.3.1 to 10.3.6

Bump drupal/core-vendor-hardening from 10.3.1 to 10.3.6 #527