ci: pin all GitHub Actions to full commit SHAs (security)#13

sopak merged 4 commits into

maincz-jcode/xtax:mainfrom

ci/pin-action-shascz-jcode/xtax:ci/pin-action-shasCopy head branch name to clipboard