chore: update GitHub Actions to use commit hashes

[LizardByte-bot]

This PR updates GitHub Actions to use commit hashes instead of tags for improved security.

Changes were automatically generated by pinact
and the LizardByte/actions pinact action.

Benefits

• Prevents tag hijacking attacks
• Ensures immutable action versions
• Improves security posture

Please review the changes before merging.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 62.01%. Comparing base (3a0d9ce) to head (95164bf).
⚠️ Report is 1 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@             Coverage Diff             @@
##           master      #89       +/-   ##
===========================================
+ Coverage   46.86%   62.01%   +15.15%     
===========================================
  Files           4        4               
  Lines         335      337        +2     
  Branches       63       63               
===========================================
+ Hits          157      209       +52     
+ Misses        152       92       -60     
- Partials       26       36       +10     

Flag	Coverage Δ
Linux	49.05% <ø> (?)
Windows	56.70% <ø> (ø)
libappindicator3-dev	49.05% <ø> (?)
macOS	56.62% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes