Switch GitHub actions to pins from BaseConfig

[ArBridgeman]

Summary

It is more secure to use a pin than a versioned release like v6 for our actions. Let's switch them to the pin SHAs and also put them in the BaseConfig, so there's only one place to worry about.