Disables entity expansion.

* Uses installed `virtualenv` and `venv` packages
* Installs `virtualenv` if none of the above works
* Installs without `PIP_OPTIONS` if `pip install $PIP_OPTIONS` does not work
* Creates a virtual environment
* Does not activate the virtual environment but uses the Python binary directly

Refactors `get_publish_data` out of `publish_check`, further
- adds before_stats to JSON
- adds suite_details to stats_with_delta
- improves formatted stats_with_delta (error delta)

Co-authored-by: Ebbe Knudsen <xedkn@energinet.dk>

* Pin dependencies based on Python version
* Upgrade dependencies to latest version
* Improve CI to catch dependencies that build whl files

Fixing
- https://github.com/EnricoMi/publish-unit-test-result-action/security/code-scanning/108
- https://github.com/EnricoMi/publish-unit-test-result-action/security/code-scanning/105
- https://github.com/EnricoMi/publish-unit-test-result-action/security/code-scanning/102
- https://github.com/EnricoMi/publish-unit-test-result-action/security/code-scanning/87

Fixes #602

Cannot exclude Python 3.7 dependencies, so dependabot is usesless here.

Jobs fail once `*.dockerbuild` got uploaded:
- docker/build-push-action#1167.
-
https://github.com/EnricoMi/publish-unit-test-result-action/actions/runs/9876224564/job/27275276162#step:6:12

…ions (#621)

In some cases annotation path or message could be `None`, which is not allowed by the CheckRun API.

Fixes #620.