Update GitHub action dependencies and pin to hashes

[tellison]

Update the version of GitHub actions used, pin them to hashes, and restrict their permissions. Part of https://github.com/adoptium/adoptium/issues/187