[SEC-WG]: Pin actions to sha values

[evenstensberg]

Dont use version specific actions, assign a const sha for them.

[evenstensberg]

remember to activate pinned sha actions after implementation.

[avivkeller]

https://github.com/search?q=org%3Awebpack+path%3A.github%2Fworkflows+%22%40v%22&type=code

[alexander-akait]

Close in favor of webpack/tsc#40 as a part of migration