Take advantage of Chainguard maintained versions of various actions.

[mattmoor]

I created these so we could more centrally manage them for folks. We can snap a release and use @v1 instead of @main (and manage with dependabot) but I wanted to test the waters.

If y'all are interested in this, I can do the same for ko next.

[codecov-commenter]

Codecov Report

Merging #1301 (6481e81) into main (1571d7f) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #1301   +/-   ##
=======================================
  Coverage   74.01%   74.01%           
=======================================
  Files         112      112           
  Lines        8386     8386           
=======================================
  Hits         6207     6207           
  Misses       1575     1575           
  Partials      604      604           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1571d7f...6481e81. Read the comment docs.

[imjasonh]

Beautiful red!

[mattmoor]

I pinned the actions to commits, and dependabot should bump them as they change.