Pin versions of GitHub Actions

[lbroudoux]

Use the hash of commits instead of the version alias to allow the build to be reproducible.