resolve some github actions workflow security issues

[rscohn2]

intel mandated changes:

• Use hash instead of branch/tag for github actions
• remove permissions for workflows