[FEATURE]: Pin 3rd party github action to commit SHAs

[sidpalas]

Feature hasn't been suggested before.

• I have verified this feature I'm about to request hasn't been suggested before.

Describe the enhancement you want to request

Pinning actions to specific commit hashes protects against supply chain attacks (e.g. https://www.wiz.io/blog/github-action-tj-actions-changed-files-supply-chain-attack-cve-2025-30066).

It is easy to accomplish with tooling like https://github.com/mheap/pin-github-action and improves the security posture of the repo

[sidpalas]

This is more of a refactor/code improvement, but that wasn't an option in the issue creation modal