chore: update & pin GHA dependencies

[vaind]

closes #1442

used: pin-github-action --allow 'actions/*,getsentry/*' build.yml (and other files) & manually reverted some formatting changes it's making (line breaks on long lines)...

There should be no need to do this again + new PRs will automatically get a failure through Danger.

#skip-changelog

[github-actions]

Performance metrics 🚀

	Plain	With Sentry	Diff
Startup time	312.32 ms	337.41 ms	25.09 ms
Size	1.73 MiB	2.29 MiB	578.69 KiB

Baseline results on branch: main

Startup times

Revision	Plain	With Sentry	Diff
3d89dea	322.38 ms	350.82 ms	28.45 ms
2f079a1	296.91 ms	337.43 ms	40.51 ms
1e4690d	354.69 ms	387.88 ms	33.19 ms
c5ccd8a	329.98 ms	365.52 ms	35.54 ms
3d89dea	345.59 ms	364.06 ms	18.47 ms
7300956	324.20 ms	353.79 ms	29.58 ms

App size

Revision	Plain	With Sentry	Diff
3d89dea	1.74 MiB	2.33 MiB	604.92 KiB
2f079a1	1.74 MiB	2.33 MiB	605.56 KiB
1e4690d	1.74 MiB	2.33 MiB	604.92 KiB
c5ccd8a	1.74 MiB	2.33 MiB	607.44 KiB
3d89dea	1.74 MiB	2.33 MiB	604.92 KiB
7300956	1.73 MiB	2.29 MiB	578.69 KiB

[philipphofmann]

Thanks again, @vaind.