Update actions + lock down to shas

[kategengler]

• Add a script to run actions-up mostly to remember the package name later
• If renovate does not work for actions we can later make a workflow to run actions-up and PR the results

[github-actions]

📊 Package size report   0%↑

File	Before (Size / Brotli)	After (Size / Brotli)
Total (Includes all files)	17.1 MB / 3.2 MB	0%↑17.1 MB / -0%↓3.2 MB
Tarball size	3.8 MB	-0%↓3.8 MB

_{🤖 This report was automatically generated by pkg-size-action}