chore: update GitHub Action pins

[nikzen]

Summary

• Pin all external GitHub Actions in workflows to current upstream default-branch commit SHAs.
• Includes actions discovered from every uses: entry in .github/**/*.yml and .github/**/*.yaml.

Verification

• Commit is GPG-signed locally.
• CI on this PR should validate the updated action refs.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.17%. Comparing base (0105831) to head (b97ce1d).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #212   +/-   ##
=======================================
  Coverage   90.17%   90.17%           
=======================================
  Files           9        9           
  Lines         529      529           
=======================================
  Hits          477      477           
  Misses         52       52           

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 0105831...b97ce1d. Read the comment docs.

[FrenchGithubUser]

Looks good to me