Merge pull request #5 from github/workflow-maintenance

Use explicit immutable Actions, move permissions to top of workflow, add missing test file, add test workflow