Pin the GitHub actions references via hashes instead of tags.

[samivout]

This changes the different third-party actions referred via version tags, to be referred via commit hashes for better security.