chore: [sc-285688] pin github actions with SHA

[xkill-9]

Added explicit versions to our github actions to mitigate supply-chain attacks as recommended in https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions

Story link: https://app.shortcut.com/internal/story/285688/security-explicit-github-actions-versions-for-api-cookbook