ci: pin versions to shas, configure dependabot for actions, go 1.25 -> 1.26.5#78

brhoades merged 4 commits into

kolide:mainkolide/kit:mainfrom

brhoades:billy/harden-cibrhoades/kit:billy/harden-ciCopy head branch name to clipboard