ci: Pin GitHub Actions to commit SHAs

[Paveltarno]

What?

Pins every external action in the GitHub workflows to a full commit SHA, while keeping the selected versions visible in comments.

Why?

Our enterprise action policy rejects movable version tags, so affected workflows were blocked before they could run.

[github-actions]

🚀 Package Preview Available!

---

Install this PR's preview build with npm:

npm i @base44-preview/cli@0.1.8-pr.600.002d9ac

Prefer not to change any import paths? Install using npm alias so your code still imports base44:

npm i "base44@npm:@base44-preview/cli@0.1.8-pr.600.002d9ac"

Or add it to your package.json dependencies:

{
  "dependencies": {
    "base44": "npm:@base44-preview/cli@0.1.8-pr.600.002d9ac"
  }
}

• 📦 Preview Package: @base44-preview/cli@0.1.8-pr.600.002d9ac
• 🔗 View this commit on GitHub

---

_{Preview published to npm registry — try new features instantly!}