ci: pin actions/checkout and shivammathur/setup-php action to specific commit

ci: pin actions/checkout and shivammathur/setup-php action to specific commit #38