MNT: Use hash for Action workflow versions and update if needed

[pllim]

As recommended by https://scientific-python.org/specs/spec-0008/#pin-github-actions-release-workflows-to-their-full-release-commit-shas , this PR changes your Actions workflow version pins to hashes, and updates to latest release hashes (at the time of writing) if needed.

This is an automated update made by the batchpr tool :robot: - feel free to close if it doesn't look good! You can report issues to @pllim.

:ghost:

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 97.78%. Comparing base (087a60d) to head (806b650). Report is 53 commits behind head on main.

Additional details and impacted files

```diff @@ Coverage Diff @@ ## main #392 +/- ## ========================================== + Coverage 97.56% 97.78% +0.22% ========================================== Files 30 37 +7 Lines 2788 3391 +603 ========================================== + Hits 2720 3316 +596 - Misses 68 75 +7 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.