chore: Pin actions to SHAs for security and reproducibility

[zkoppert]

Pull Request

Proposed Changes

This pull request pins the versions of GitHub actions used in the project's workflows. The versions of these actions have been pinned to specific commits for increased stability and security. Version tags can be moved and create unpredictable results, so pinning to a specific commit ensures that the same version of the action is used every time the workflow runs.

Readiness Checklist

Author/Contributor

• If documentation is needed for this change, has that been included in this pull request
• run npm run lint and fix any linting issues that have been introduced
• run npm run test and run tests
• If publishing new data to the public (scorecards, security scan results, code quality results, live dashboards, etc.), please request review from @jeffrey-luszcz

Reviewer

• Label as either bug, documentation, enhancement, infrastructure, maintenance, or breaking

[ajhenry]

Good call, thanks!

[jmeridth]