chore: update GitHub Actions to use commit hashes

[LizardByte-bot]

This PR updates GitHub Actions to use commit hashes instead of tags for improved security.

Changes were automatically generated by pinact
and the LizardByte/actions pinact action.

Benefits

• Prevents tag hijacking attacks
• Ensures immutable action versions
• Improves security posture

Please review the changes before merging.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.97%. Comparing base (7769c42) to head (ba69ef7).
⚠️ Report is 26 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master      #82      +/-   ##
==========================================
- Coverage   72.16%   71.97%   -0.19%     
==========================================
  Files          15       15              
  Lines         546      546              
==========================================
- Hits          394      393       -1     
- Misses        152      153       +1     

Flag	Coverage Δ
aarch64-apple-darwin	48.61% <ø> (-23.76%)	⬇️
aarch64-unknown-linux-gnu	71.97% <ø> (ø)
x86_64-apple-darwin	72.37% <ø> (ø)
x86_64-pc-windows-msvc	71.97% <ø> (-0.19%)	⬇️
x86_64-unknown-linux-gnu	71.97% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.