Upgrade to latest sast-rules

What does this MR do?

Upgrade sast-rules version 1.3.6

Note: the changelog entry only mentions a change made in 1.3.2 as that's the only change that affects semgrep, since all rules other than eslint are local. This will changing in coming MRs.

What are the relevant issue numbers?

https://gitlab.com/gitlab-org/security-products/analyzers/semgrep/-/issues/127

Does this MR meet the acceptance criteria?

• Changelog entry added
• Documentation created/updated for GitLab EE, if necessary
• Documentation created/updated for this project, if necessary
• Documentation reviewed by technical writer or follow-up review issue created
• Tests added for this feature/bug
• Job definition updated, if necessary
  • Auto-DevOps template
  • Job definition example
  • CI Templates
• Conforms to the code review guidelines
• Conforms to the Go guidelines
• Security reports checked/validated by reviewer