ci: have actions pinned

Author: G-Rath

.github/renovate.json

@@ -3,7 +3,8 @@
   "packageRules": [
     {
       "matchFileNames": [".github/**"],
-      "groupName": "workflows"
+      "groupName": "workflows",
+      "pinDigests": true
     }
   ]
 }