Remove false positive injection sink models for docker/build-push-action and step-security/harden-runner

Remove false positive injection sink models for docker/build-push-action and step-security/harden-runner #23306