ci: renovate GH workflows

[ennru]

Update to current versions of GH actions before Node 12 is discontinued.

• Temurin JDKs, run some tests on JDK 17
• Replace olafurpg/setup-scala with coursier/setup-action
• Ubuntu-22.04 while at it
• Locking "privately owned" actions to their git hash
• Explicit permissions (see https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)

References https://github.com/akka/akka/pull/31730