Update GitHub workflow actions and use commit ids instead of tags

[ptziegler]

Tags are supposedly unsafe as they are not immutable. A malicious third party can potentially retag a release containing harmful changes, which would then be executed as part of the build.

Using the commit id makes this much more difficult, as this is not easily reproducible.

[github-actions[bot]]

Unit Test Results

         4 files           4 suites   1h 21m 51s :stopwatch:   7 080 tests   6 891 :heavy_check_mark: 189 :zzz: 0 :x: 28 320 runs  27 560 :heavy_check_mark: 760 :zzz: 0 :x:

Results for commit 0b3b2e0c.