Pin actions, reduce permissions and third-party actions#2222

cjames23 merged 5 commits into

pypa:masterpypa/hatch:masterfrom

sethmlarson:fix-github-actionssethmlarson/hatch:fix-github-actionsCopy head branch name to clipboard